last executing test programs:

9m8.330752017s ago: executing program 1 (id=901):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)=0x3)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000001600))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000000))
getpgid(0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d0009050200000000000009050c0000000000000905e8cd"], 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x10}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@remote, @loopback, <r8=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', r8, 0x40, 0x8000, 0x8, 0x8, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @empty, {[@cipso={0x86, 0x3b, 0x1, [{0x0, 0x11, "284446af9e15765814bcf406e9d985"}, {0x6, 0x12, "b52ed5396066971b59d5c9505afde6ff"}, {0x7, 0x2}, {0x0, 0x7, "9a891824d3"}, {0x6, 0x5, "f6b265"}, {0x6, 0x4, "1e60"}]}]}}}}})

9m6.509850517s ago: executing program 1 (id=911):
openat$dir(0xffffffffffffff9c, 0x0, 0x458002, 0x55)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$loop(0x0, 0x5, 0x86100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$loop(0x0, 0xb, 0x80000)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r3 = socket(0x1000000010, 0x80002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={<r5=>0x0, 0x6}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={r5, 0xff}, 0x8)
shutdown(r4, 0x2)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce0"], 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001a0001000000000000000000200100000000000000000000000000020000100000000000000000000000000000000000ffff00000000a02000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000014040000050000000000000000000000000000000000000000000000000000000a000100200000000035362d6165736e6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080010000"], 0x13c}, 0x1, 0x0, 0x0, 0x44040880}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

9m3.860605992s ago: executing program 1 (id=925):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ptrace(0x4207, r0)
r1 = socket$inet(0x2, 0xa, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000164000/0x3000)=nil, &(0x7f0000b29000/0x2000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x5a848})
close_range(r3, 0xffffffffffffffff, 0x0)

9m1.553819738s ago: executing program 1 (id=937):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)

9m0.602476947s ago: executing program 1 (id=944):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
read$FUSE(r5, &(0x7f00000014c0)={0x2020}, 0x2020) (fail_nth: 42)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

9m0.534725552s ago: executing program 1 (id=945):
r0 = socket(0x23, 0x4, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_io_uring_setup(0x5db4, &(0x7f0000001140)={0x0, 0x3f0, 0x80, 0x2, 0x3de}, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000060601, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20044040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
r8 = dup(r4)
write$UHID_INPUT(r8, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x0, 0x8000000, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt(r2, 0x84, 0x83, &(0x7f0000000480)="010080000000ffff", 0x8)

9m0.298564835s ago: executing program 32 (id=945):
r0 = socket(0x23, 0x4, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6(0xa, 0x5, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_io_uring_setup(0x5db4, &(0x7f0000001140)={0x0, 0x3f0, 0x80, 0x2, 0x3de}, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000060601, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20044040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)
r8 = dup(r4)
write$UHID_INPUT(r8, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d27c9a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f06f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d8224fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d784cfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0xb29}}, 0x1006)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x0, 0x8000000, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt(r2, 0x84, 0x83, &(0x7f0000000480)="010080000000ffff", 0x8)

4m41.242266613s ago: executing program 0 (id=2237):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001de000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8af05d10000000000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d90100000020207f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b877000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0800320005000000050033002e"], 0x2c}}, 0x18) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000fb1301000000001b5b82215a3558d5ffffffffff"], 0x18}}, 0x0) (async, rerun: 32)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) (rerun: 32)
r9 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1)
close(r9) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x8001, @private1, 0x920c}, 0x1c) (rerun: 64)

4m40.839278394s ago: executing program 3 (id=2242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x8, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96})
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

4m40.684876295s ago: executing program 3 (id=2245):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000040)=0x312)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000140)={0xffff, {"2ac7d502ff049538909f874a88417c00", "f977000000000000000000000300", "47010b1889b9ff01ffff470300"}, 0x4, 0x7})
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
getitimer(0x2, &(0x7f00000001c0))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f000036d000/0x4000)=nil, 0x4000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1b, 0x204031, 0xffffffffffffffff, 0x82f43000)
r3 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x166)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000)
r4 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000)=0x7, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(0x4)

4m40.420612539s ago: executing program 0 (id=2247):
ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xd5, 0x0, 0x31})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, &(0x7f00000005c0)=0x6e, 0x0)
recvmmsg$unix(r1, &(0x7f0000000e00)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000800)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/127, 0x7f}, {&(0x7f0000000ac0)=""/49, 0x31}, {&(0x7f0000000b00)=""/34, 0x22}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000b80)=""/139, 0x8b}, {&(0x7f0000000c40)=""/137, 0x89}], 0x7, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x2, 0x40010042, &(0x7f0000000e80)={0x0, 0x3938700})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000680)=@ng={0x4, 0xf, "ca7553aa45019829"}, 0xa, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x77622a85, 0x0, r3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

4m40.19297725s ago: executing program 0 (id=2249):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
syz_usb_connect(0x3, 0x348, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r1, 0x221d, 0xcf75, 0x37, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

4m39.278758165s ago: executing program 3 (id=2255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="fc923d2e11e12c8a623cbc4356af2f871bf94882f9d49b3c0a28c62e7e8fb1e642618a10ece77ab86a0c10db506e0b39bf553a584cec60a771f7f42283a7fa3d76f5066300a773eb0efb7c5ed6f963c534b854", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="1a253aab", @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0bc53a93187859464dcd02e15d12e9f772aa55a039291bf69adc8cb00f44e263af9c136e87a7c56626c72492ab691dc5a58d2e098bf7c3fe40da185fae5c7a9c2e8462880033a591aecc0919ebc9c7f42aa2226d0054c7fcfd47dc8d65f331101d1f8b8dae3548b10b70226069c16af019f565d136c3a17b8befb1a520189ee9a06dd31115040f683fb0f8dd2c932a53107c889f0efed2dff5e962dd584a1274e7d78adb7531870ad15fc9dddd4ed890ac7f3b4d0d563aacda238ab00c838a73b6cd55c496b8e2e8f2bce574140fdfcf4e2f", @ANYRES8=r3], 0x54, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480), 0x0)
sendmmsg$inet6(r4, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000000100)='4', 0x1}], 0x1}}], 0x1, 0x5dc)
lseek(0xffffffffffffffff, 0x6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xffe0, 0xb}, {0x1, 0x9}}, [{0x8, 0xb, 0x101}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0)
lseek(r7, 0x4, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
recvmmsg(r6, &(0x7f00000040c0)=[{{&(0x7f0000000640)=@isdn, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000003e00)}}, {{&(0x7f0000003e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003ec0)=""/15, 0xf}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000003fc0)=""/155, 0x9b}], 0x3}, 0x8}], 0x3, 0x40000100, 0x0)

4m38.993750787s ago: executing program 4 (id=2258):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
mprotect(&(0x7f0000965000/0x2000)=nil, 0x2000, 0x3)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
vmsplice(r4, &(0x7f0000000c00)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 00008'], 0x2a)
close(r5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x5, &(0x7f00000003c0)={0x0, 0xc8a1, 0x862, 0x6, 0x23b, 0x0, r3})
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10) (async)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x40010, r2, 0x7ca65000)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x8251)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000140)='/DNy\xe2i\xefr`', 0x141801, 0x0, 0x100, 0x0, 0x0})
syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

4m38.343032586s ago: executing program 4 (id=2259):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="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", 0x1000, 0x0, &(0x7f0000001000)={0xa, 0x4e23, 0x6, @loopback, 0x9}, 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x681, 0x0)
writev(r1, &(0x7f0000002240)=[{&(0x7f0000001200)="6aa8c4a5090be2b73987640e479868657337dd1a6d494452e9b198d4cacce349f620df0902dacb2ebf4721f96c89b5e0005e71f91be0069adfc5d6f88e3d0ee98feb50badcced594e5dd47bfbfa2a867016521125b404a8a4e6e7c262e14846b9684dd08c099bc3d2983c4c86dcfb683b00993b80cd8a3fa46df0938ce55bd21b55d54f95b185c948e7f7fcaa4a705a7ff56a5f5250704c608fa85edc0c4713d05375ca6b7b01c8e534844c9be61d9c0907edfa34f1a1b9045d4dc283eb87f7bfad603bae21ed5f4331aed5e9073d98e9c7d990c70911c23", 0x86}, {&(0x7f0000001140)="5e888d774f4c6fbe282dbd202ca15961a0aeb2a4f7f8ed3ecf4558af7c81fbf85783076fcc0cf1f67e6111b578838190318184bc45338f41252ac0fd05b5ae571cab938829610d3c3ba0a4e999accba17b8288ab15e683c1abd607fb8bf474cd16246672edd40573a5a3e7a952340a2a35df19001fafa1b062ae56c9277891e30b7df731", 0x84}, {&(0x7f0000002280)="d45249abf69ada10ba91330f93dcf41308d0857950ad5900ffff7f00000000fc51e1852b41deb8972dcd061fe2374b9da215103d92a3a000"/70, 0x34}, {&(0x7f0000002300)="9ae711bc454a8e1c49e5f58913582e8942da83f42af21ae5e47346643ffef6fb620427c46c436e381d523cd216200a34ed1f5a27ae5565ba5ca80aaaf5a7958d7222a69985a5093253f2704ae09f5aeb948df247bb55ec7adc3abbdf9738e3659b81314b938af8a97abcb31a2264b1a5956dacdcc53fdfbb9f23547bf9e121c86472b3573ef6c4dd7beba05d3421c8e650747b83d52f8b4d44d205ab86fe8c298a28404e9d2739c806806b0cd9c1dc580c37ad03668269fe297d1d4bb93283485acbd7fd19583140ceddf70ee42f089e33989744ff04cae6879ca77fb60d7ea8b692ffdceaa09acb0d4a80080f0991fd4a54955ac856bfa1a8420ca94a0d1e3329fea993dda4c6dee6462ea42c5511f108bb37c6083fe91486f1aa9b92123ae6c3c93f923cc35a7f591b5060d2894249e5149dfb8e3927b82f3e32759ef1ec38f335415393380a45d5ba1903c6d5ad2f6d37f99e28c2b4f3c13f422b27af75efd072d4b1065efd53ff47d13fbd9ff97c21d8aab5105cf8c760fd6cbcaedb70894990b38ce5fd0d3578c0d9b2d0f33d3a24f90033d7089a6ce323ebf7022a0af06aaefc09fa247bfb0c6cffc2cbb39fe68b2ad6f3f295202606d5c6c3bb5542d85164bbb572328e5bf5a8df2f0131b504d98c4d5bb95f8bc182f408b80beae5b6f650442bcd2965d822c23d4c684fba4a4931158888007d8f8cb82187039bfd06ca6078fbcdb52bc4154ee6f3539c41295e5fdec394fc54688e48f5846d53cda3d514392ff7fcde1ee8d83b56912dec4aa155fd4e2519b76e8729a0cab180e288df6165843362fb240910c35eb67daac366cb23f81cdc83bdf2cfa3af16097148177ef43ee8b6dffed9b7c856835638b7c95466fea32144e2c745ac103eb39b5c81499c17f97f95151a9dd083ddb90f5ea9a3b862e14bb869dd826bce596580b05dca9286d8e03bee5e546ecb965d159f7d5cf5b85ee69f5735c74c97faaf183a67bc766a7eeb3e9ae2b9f0e8286cfbd845fe4081f442ed2e7f4924d81122f91a768ce48c527d3d07ac22513dd9d4d0352a71d31a5b5977aaab276ec34af57944728a80b3afc1c88310f8c4fa49e0f40a3d7763de7e36b455423299a026d6e59cf5355cf81bc53c23468656d9b475f2013c6d593834c2e266bb9057f1630fd5a3dca131e7e431e5c5b80831b0d4427d2cdc75bb2edbf204a46616ba0d6bd5b0d3c20f5f019de3bb69042173cf0527fa79034f44fc7dd2ca65f083525b68be3cfb8108e6a2c1fea19dfe17a67e9980fc80711e452b512037c5534d126f75c9f10394eaf74b9aec918e24f78631a40795eee85669ba498cd3fd2da080957a0b4ce611520efc165c3a9e9f06070937f42b3a13127286c676b29f984f769fc499f54468f88a267f028866ee58fbf4cc4f5d1e1377bfbb94ecea212a97195467e4c43ae3277bce3ed6548317abea3977eadb056f487d7348d0e7cf59d6bc7f508bb8456ef92dd6110d92a9fd21629ad1dcdabe2942911658a787be174e3e62c4992ce851809826629a9b0529f8dcc0411e591fd4f229bae861c1727dda8f344bd248478c547188e406b719f24c0a0daaacfe0e32a1d2f4fef14c49b1f9a5e123d3cbd08e3c7f3cf95cf1b23e2bd9e3895508de517e560cbb796c29c69fe257fe7c08dce1d7a3788e4c4441d617abc9ec1f8d58cfb7e314281daa835dc8a79c3b154fad6ddc955270288badb4f5f604ebb2c3153a7850b21d5a3f01e34b1745bcd250ad84b02a6b055c8bcc3c68d35458d4f89ee8205a6c71386c65e85927545a4cffbae8a6fe989cd0da48769863b0b17d834297d9dfd9b4de2e894a6342e5e8902542c1e5b2fb5e866ac9884abfe5eb4b64fd44ae7b2128ff3b11f221fa73bdcbf6514a0dcee39495ae33e1698b183795cf565a259af37fd944462d97bc26b6bb62cca955a5d97bb1e5d26a42d5d8153fdc86bff033f0bf985cfa4c8ced31e38f48f3448f99eeba3b1492d008d35a5715d4073de775b3ffdcc2ac42961d3df35ff8e57f82663b3ea03e2531f74fb79a7ca8e4529d057f6b93f0ab579025169e9df350672fb980f8e387aea5d198acc4368f53fcb1d913253b8e7b3006515fc228ae441d211b12b0bff83d1989cab1c5b953c1cbc9db7b8b3c21df194ed8481e4ad78c89df6cf55802c6905c6e8bcb5cf03be8115261472570cd08e8f62dddbcfd639595a6d5f636ef7ccd90526d79d914ca3855346b797110250318ffe9847ee190cdf6ced5fa24b065296aee16c6c31bea0ac90ac963d07eb7d8cbfabdf2fcfbcfb27dd5f3d9cad35c5cf217d1331191c0d11426c8eda962803ea927c12564cd854a80ecc644fd5242591baf26be0dbe4d7136d6a5f19641fa2ce10f6b97f383fe2588d60dd84d9ae1eba51f565f5b4d7ecdd7a83c4f9cff12bcffc12c9b89e3c33539c326e98522ace3f8629ecfc29cac25f13a23b871442d39a84ab2bb7f8f061d907beed26f16edcca70aeadab4ca0600c3742dd78c1de8bfddfbe1c92dce9535986f416ac8d07df8f7c417c467aba2a7446cf4941303862359030bc6e1ab9da8c5a6a4d26fb01d81fedffa19907f129d0ee659f35176f06019a897294c2ac14ee97f9f71d6fddd626ceb534258768078ed513b473290164d8391437013c2d6d2b0c7a26533abc62d702eab6e70803e678c5dafa8b7f85da7bf34fdbac336d482b6c7222773142c0989680cad71c9cbc9f9fb0eef433863357a1623e48a040f977f05ba39874474db956c27a22cc2da594a23ca8db192e10e8361460c1bbe1927227c82b80082d27dfed59a42db656983256cb3e682e11df96fe593825e0b90f0b58a29def386d7fd427ba50ad153964305052fedaf32c23063c448de3aadaf858229af6c78cb421ab62cb27b45d6b3e7d29eeeacfdb87cd5881cdbb5615afb0ad7fdedec789ab12bf5f1b0cffc71ff995a9eb9c90dfe2b4e884f3ebd413fc430bf29f809b249b309eae3595de3a0eb8d18c5fa2badf8ddf7b04434728c300209585a469349f82073bc0f5d9f604fabe725120fc8d601b3ae239e0b676bd316d30e6153e69734c6eef92daed6ce8e6f29b6224194389917450872ecf1983a4486056b2b8a8f0296c298cef5329fa862ce2391dde6ff740fd8a249688ab73e1d40d6525f249efc75582e3efd94610eefd4265495579edc902e4eeb692c1b81c17ba4c0fbff0f60b0ea70ebb0b138c43b39a896a4a140ab7dc6c75a7cbf1feeb3b80dae13988dcf791f1913de7d88901d674fb924a42bb87a862ebf784c6c8b8741dbe3c83b5e080becabf98874cfaa9b743826ec9e520d80ec45fbb55f31a5d45a76a8ad2f5f038e8f15497129e0facad259732af287483f87a5ed0085279b089105cbac872b78d584fd592fc2fb2bf0d5bcc8099b1e2ed747764def5a96d01c7977c8d63e4bfef7708ec9e47f78f383b18e1eb79ce67e7124b96755a45c8794df969156fb0190dd58a95693189115fb83305cb44501107b8413d31628c2b6f6e65f6601f0a9d547c09f44ae9c357e6c8d6e81c0cfa5dd6401b5dee6b58dbfb5ae09230e588e735e46f67012dd41478a4ae3b16e6cc8db29a9e57fdaf3ea9cf9b64fcb7a2fa64f43fdcb8194040494ca48253450405b6728c442e3a08f0f6a9fa1c995c63f6244e09d03b17879ce3e0886177625a3a1c88c30585fdf0a56eca30a5acca84aaae2fe35776ed9a9e509a316d61bb27e83f64693954437205ba22b2e97a25164a037cdc2b15459785069b5bfbdb746f15dde60a822eb062d7b780179f1977e6af61938ae44633967f548fc126b2797d3af4a97520f4893f17da4420c01ccdbf9dbaaaf304db27107ed10907ec2f0ee399bec1ef51da48141106f0dacc864ce4175041ad3de5a676021e329b3f5bd06624054bd6cd2af0c859ee92d8f2b7ae92ca2bbb1726308c57de954adafdbb8fadde7fd9d156938044b77598c92bdd03bfd6f5f9ec278dbb17a9c4c6a1d472cb17aa3b527e546340b4b4221d5a19a8459ef3dd1bf57024078029dfe3fc5f55eed651bf3732e886cdd93fa8fb9ad461275350351b2fc1c081017cf91254ca0fe6ee9f627a8c590f42ef99898c2b0c4e9b43f4efc1560a673c1c0b1790a7be7bb467d1d1abefc8229a1c504d7ab91a386f3a5fa68cb0ba1aa60d6d717ed3aa0dd35d07877067da9fac26b56f6d63ed9ad9c807173ec48779b7f2bbf63411b32541d4e3798a2f6a1954a6f781ab270711b4f4d677d6d0144c975d100ec6f4d4b9020cdb5fe303e5da07bcbfb516138c44b36b62e8578219bbbaee316cfab13e06adab8ad21047e33434032b3fb6ec456466cfd50966173dcbdef71163d0deae3b1958e0474319332c983491d5a50eb76c72af5d141caafae43225b54fecda2d37536e8f506c153ad48e904b67bd87a3a699f9b4a1fda84da9d5eb57f3e112dfa987bf6fcfab3c84870c01b2e14383a25744624f8328e62e1e7e5152a10a777c158444703d12b501ad40c00000000000000adfaa370030c5ec207c829956e8699236a80b5b6c37b2147064928e0b377ad7eec83a4a874b0e0788e6c96daec1cd26ff1d3a1cc1617760e3dd1905f9b0edde3a977c7880157b55f4d9160d6f912199307557ae2f56f7a3660f33cf706a8fc90f45a35aa462d50c8c8129eab9cf98ad393caa7ab29bb2d9c878adcf27a5a442e1d4bc09b3195fdf6342e6c4fe88cba74eaed3e61066e1fa522bdb38b4227bdc10cfcee25585a4628878aac5daf0d584876377a6f2af73edabe0c88f6ba7e15367efb65df5a6e028900e3e29e787590a3a1a4e6c1786717976e9ab3ee9daff073742d7199471de58fa2ca96d2ca5f206ba852703b5363037c6c3e0567e167cfc398bc49a1d06a161032fd14179c342c402e8b8d9dffbdbaa5d47dfe2de62083b52c7b988448e9c7c24674321e075c3d3d721a7c3c413761a46243ace4d7027d79e2b393524621925eca844ead79590b5f0d4a3ccb60ade958e541365a3fc41eba3e682c51f9e2a91a1496c4b46e0d26a68bb7c54274e9a00be01f0975ea76a62754043e94f3a057adc846ed1d0dadaf627c55e46291d32b4765ac491fc059a809c1516bac624b37957623aa22d98db8de8fc1fa1f64b5fbc1f483dc0d9673598ffea4bcf390c6b2edbed4dc330a9ae9efef2b1d6a5d8db243bcb3df5062cfbcfca0f23b47355425070984d8c0d88061850278a2a22c7ae769d8c025e6bd40274a607a933aea02a726d7c03dd20ab4dd05ac8dc30bf47db2ff15e978ec91d69ecbdb78aa6822da5a195a53bc105ae1b9ffac29754b4c905ee0de74896a592dd084616a4c0b9e221e46ba8c53545c985ac1c1e584bfa260f5a30cc52e10aa311bb95ab0ba40d8be6ff0210ed6a4e1d8e7883bf31fefcd1b2ab0643c76772c1b8b122a2f603af354622e7777f9f692bde598faf5d155ab6aaf947f59a5882ceb9058d944dde5ba473278d9c5824231d9edaf5f3c34601bdd819888b21ab0cbd51ead38c46b414cb57ec3d4922e78062047ec59a650e6aebe633a779ac7578e4fc9063bafc74f005b83e7722903c7dd1d43a7eadf5341b655fa47c4bc0f1ae896426d82f19efafd72a26ef4841ed4f416889e81dbe9be3128dd653260b7f7501feb5b01126c1d7af707b2e3f787f162227a3f70c23a22d03971c8b30d4159bf4b552d2c1ec2bc69322000aa744653ca799879d6d2a5a06ea29e8b85bff435bb2b5cf27e0b865429b97028a120ddcb45d6724944e84dbafd9263432ba3e994bb48c321852605f9558bb68cedea706a6fdfe9a8a174d12e7d1002b0f93496f2d092b4484da587433ece7984e4169b3a0e93c292390fda871f7ccaaa2c3bc466c248eac01f1e1a31ab0a6f77f5407a4c8bce1ada21d057a5cfc0ee36519cf9c1cf5b0493f2c3f9f36a0c8fa215c8764cc291ffe99831088041167bd2dbb886111a0d6fa1e3a24ec2ef506f9458abbd962a30969e7e643a3c791fc4f83674bde5ae00b4aba4edbb6979b10ac3909bb352c578b86952d0f8adcf4deb7856e8fc0294c22690b4029aeed8cf1e377b5b4a6d765cd1a6c493a44903a6d9c439fa348e1b38d6dcd49ad6d4444291c3ede6ae369aea8526eee4c095958a8a3a05cda055a37caf16fd7a9c0e3586412db5a7940e867222851faabfc64ead959abf5db82ebd0929204898d5", 0x1000}], 0x3)

4m38.126383167s ago: executing program 4 (id=2260):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x218, 0x805, 0x0, 0x0)
getpeername(r1, &(0x7f0000000340)=@phonet, &(0x7f00000003c0)=0x80)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@loopback, @broadcast, <r2=>0x0}, &(0x7f00000000c0)=0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@const={0x0, 0x0, 0x0, 0xa, 0x3}, @union={0x1, 0x2, 0x0, 0x5, 0x1, 0x4, [{0xb, 0x1, 0xfffff699}, {0xb, 0x1, 0x2}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0xa}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @const={0xf}]}, {0x0, [0x30, 0x61, 0x5f, 0x61]}}, &(0x7f00000001c0)=""/150, 0x82, 0x96, 0x0, 0x0, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xfffff4bb, 0x7, 0x0, 0x100, r0, 0x0, '\x00', r2, r3, 0x3, 0x4, 0x2}, 0x50)

4m37.921630022s ago: executing program 4 (id=2261):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES64], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219ea949"}}}}, 0x0)
close(0x3)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000))
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x701880, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r5, @ANYBLOB="14000100fff1ffffffffffffff0000000000000108000800020400"], 0x34}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r7, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xac}, {0x6}]})
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000080)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{0xa6f, 0x3, 0x8, 0x8}, {0x9, 0x8, 0x9, 0x2}, {0x9, 0x2, 0x5, 0x3}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x0, r9})
syz_open_procfs$userns(r9, &(0x7f00000001c0))

4m36.818878199s ago: executing program 3 (id=2266):
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x97f, {{0xa, 0x4e20, 0xfffffeff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x81}}, 0x0, 0x5, [{{0xa, 0x4e22, 0x0, @local, 0x200}}, {{0xa, 0x4e22, 0x96, @dev={0xfe, 0x80, '\x00', 0x23}}}, {{0xa, 0x4e23, 0xffff, @local, 0xde1b}}, {{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0xf74}}, {{0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}]}, 0x310)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x0, 0x9, 0x5, 0x5bc4e417}]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_clone3(&(0x7f0000000440)={0x40002100, 0x0, 0x0, 0x0, {0x400}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040041)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38)

4m36.424749315s ago: executing program 0 (id=2267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2b, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24004000)
r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setsig(r3, 0xa, 0x11)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0)

4m36.342055684s ago: executing program 0 (id=2268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b413661d69f5eb"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458d2fdcb7ac00", "f4bd000000801900004000", [0x8, 0xffffffff9673e35d]}})

4m36.049564499s ago: executing program 0 (id=2270):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
unshare(0x26020480)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x2, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x81, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x10001, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x1ff, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x101, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x1, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x4, 0x100, 0x1000, 0x7, 0x6, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001})
poll(&(0x7f0000000bc0)=[{r2, 0x210c}], 0x1, 0x6)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

4m35.86719307s ago: executing program 3 (id=2271):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x277fffffffc, 0x4000, 0x0, 0xffffffffffffffff, 0x9}) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)='\v', 0x1}], 0x1}}], 0x1, 0x440088d4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async, rerun: 64)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000480)={0x1, 0xc8f9, 0x800c, 0x0, 0xe, 0xa7, 0xffffff59, 0x7}, &(0x7f00000004c0)=0x20) (async)
r6 = socket(0x2000000015, 0x80005, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) (async)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @remote}, 0x100, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='tunl0\x00', 0xb, 0x1, 0x7}) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) (rerun: 32)
r9 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x210, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x8, 0x7}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000041}, 0x43)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) (async)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd00000010000100090810000c00000000040000", 0x58}], 0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x50)

4m35.4984432s ago: executing program 3 (id=2273):
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x8000004, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40009c0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x18080, 0x0) (async)
r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) (async, rerun: 32)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000280)=""/202, 0x302000, 0x0, 0xa}, 0x20) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
statx(0xffffffffffffff9c, &(0x7f0000002880)='\x00', 0x1000, 0x7ff, &(0x7f00000028c0))
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) (async, rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00a081b1f4000904000001362434000905df03"], 0x0) (rerun: 32)

4m34.78612295s ago: executing program 4 (id=2274):
r0 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@phonet={0x23, 0xc, 0x93, 0x8c}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="f0", 0x1}, {&(0x7f0000000100)="c1b81869898cef327e830acb5c3beade11b382d071cf2028dcb982058d9a1221fb754ee02786b06b4931dd8a771e380c3175eedcf58c220ee569364008a23f89543b16098c9ece370354764eda4fa88b3988ca517fb3783871890c61bfcf54", 0x5f}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x8080)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000000801000000000000080400000000000001000000010000008b79b9e7e90e0783eff9cfb2bce92b64253bf93794f7eb84fd7047b394d3cf9cf2c169d637b5375bf228bacc3e75f4af76ef6e4bdd91883f32759e2beea7ec7d3e55b9b50cb42fe4c706f2174e8650abde05073894fcf5dfbf0cb8199f7eecfb77c55cc411353e2d1fa559d59983c8c0dd0ca3e1961ba8fe44341baf8e6fa7f89f7d6a52ecad131a513263041a77b22692e55433d14f5eca03e726c1df62d1333e25de753026d04c9d52d62b23807aee67307e6df1a83c2174a58c9b14f9f111aee7c217e68960b90b2b09941deaaafe3715d0968c3d62a346ae1d137e3a6b64d4b8589b602cc9e8af15084566eb9bfd3fc14ff9d051a253ae48bcf5f11badd95a915f45ad5465e86709873805cee95c27934b09b4f332052d3b9e236b057c54d66b85c57847d52b5cacdbd4783ae59aabe07b019e2bf727baf13b2794a491f735c3a61f85d65d818de05de5a688d7fa14006bbb330295af8316afe5f2d23345e2f2429b6aab1d6c86413a73b0c61aa705fcc47b64451190635991453dba6926f5c85d3b3e413b81c5ccac00d15d653f24ccdeb74a141609c708ab0edffd79e9ec3c40ca6dda27d676f2aa7e032694551714f94e933168e7fd8d7cc90e7823cd9f2e2d2404b0bb17ba1e123522067096d9a7b79e31805ed8cb6b1769fd23ece395c0bbab1d379fc635b313ffa9f5f3f15db81bac971db0b910caf4ae55b3bc7f7c15a316549f868d41fd20e2f46289ea7b3bd1872df8c2c8ffb22da2228e268914ec1d6dc6c98e4739a9adf4439d122f11cf9b37eb21a0cd70a185f3cc45e346677d063c714492af4dcee7e7f822260dc6034e562153b15881683af586737c6273cee855c93b8585a852c96bcf1d375880dc2ad692562f1addcef4cf467f630d696ed3fb319ba103b91d25d0ba3269e01664143bcdc7806df663f89ba7bddaa495de81ea6c7af8de0fb91ffa952fa958eff375d4c763b9e6e32f0c49fdf0220b1b74d80a84d15f888c5763164cd63801da4310c340acae004bd6cea1a5c9ff0f1343faa44c459baf0a2f6f31e1b04a7fc9eaf38dfb7c01a3ad5b74f2627b2932173b2e4cd3676a4e0ce7f5182fd0a224affa8394be91c1fa32cd9835dbe57338d13e4eb7118eb1cdf309474b8dcd8c5e9fe582aaaa296dd4f657bc2c2eae02e7e7696afc64b4094fe378e6ecdf68432207b776d78e149741f709c3d903a6fb809e2649fcab873b186208a040c370d0a3f6bfd79c49fc40b3c0467635714b720ec306a1a21e68818cc7b8a36d092c1a0eeee56f722728c35bf5f445b9744c299fa3bc8499112b490e4d53499e237fb8efa50199b4ec02297cf5bf9e11ccc8748b4b318edf80e4cf40281ea2bc1018972708dfef3d509662c2e11d9ca0d0b6fc2ec9387f4f057b2d73ccf7d69ffe0b0923db00000000000000"], 0x418}}], 0x1, 0x44)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020400)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r6 = epoll_create(0xff9)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x9000001c})
epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2cff}, 0x1c)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e25, 0x100, @empty, 0x1fc}, 0x1c)
listen(r3, 0x80020003)
listen(r3, 0x0)
r7 = memfd_create(&(0x7f0000000580)='/dev/ppp\x00', 0x4)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x2})
r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
io_submit(0x0, 0x3, &(0x7f0000000d80)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0x1, r7, &(0x7f0000000b00)="613aa83127c455d701b10328ac3925007c42bf04efdd7cee6b1d046d62bf0af8eb97f620e8fd8bbd1edd6e036f444c281b3b8991ca6050006c32", 0x3a, 0x5, 0x0, 0x2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x300, r2, &(0x7f0000000b80)="4f7f8338ad9c1fc2ca1bd794876a19348361f90f5a17cac56de337c31e820d2a06745d62ce304af421002dc3c468923ee0d9d191225885f3fb6a823287f8f7d9d2cf24443be4c9d5979dbfafb7b72c47ed474d4a6f3e555b5ba0bebee8ea1475a3c2a9b71701fb15d7600a1ef73c533c57429266e4e93650bb7b39766408daa1aefa9207b8da5db3111b66d269caf771d385b401e92939047afe3b37ff9e1254715347147c8c8746ffb909f86dda1253cde787f769f66fc984f086f1f3fa1ffae6db99742d798b2fc7ff579d6e4577", 0xcf, 0x7, 0x0, 0x3, r8}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x8, 0x7, r2, &(0x7f0000000cc0)="ebbfe696454b788483f7e450259e6a6038f4a01504b8b94e6abbb2aa013f2304a1c44470350286522f9dcc53e2b2ca9f687aea025baf5b024034b1b487c47de7af11ebd1df490a2d684b68a192e3a401bf64a685ed71bc3d95b2b81695fac0cfdef6ec41d383", 0x66, 0x0, 0x0, 0x0, r9}])
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000540), 0x4)
r10 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441)
ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000100)=0x22)

4m34.497749266s ago: executing program 4 (id=2275):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x4a33248eda255e64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="030108000000030000db8545b6eb833bbb6a7346ece107f35304a8cef14cbd063aea3ef8401d60a76b867f854a722a3113a9389d35f20e436d0000000057e41860e0614e13ebebcfa35b1507bf7bf64e0100000000000000db50"], 0x9, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000003180)=""/243, 0xf3}, {&(0x7f0000001340)=""/120, 0x78}], 0x4}, 0x81}], 0x4, 0x40010132, 0x0)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r3 = io_uring_setup(0x601e, &(0x7f0000000580)={0x0, 0xba3a, 0x8, 0x2, 0x33e})
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="000000c1366b8ade7db2b5d248bdd65efb5124f0623158a8e30801d83b304db031f74806a1876ff2302330d505b9f95e408399e92206cbf81f9c87d753473ea7462efc7867206253ac1c369271304b11ffdc3b9ce9d7bce9f632faf367ec9b18d775da59e4b6e958c91e3834730cf4a09e64f69371d887001c67d21e2ff58f7c99b831d03175e6c7eefd552182c659721a793b25e96ae42c0e5b3b219df6eee91e54dc05a5f4b187f5acd7136250b078062d3147078ab73139740874ff717a100e97cf3174b46515f73ddc653f0686086b62289b21f9258329a5f6a80a92b917a287c8ee3f23", @ANYRES32=0x0, @ANYBLOB="490002000008000014001280090001007663616e0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m20.59716844s ago: executing program 33 (id=2270):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
unshare(0x26020480)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x2, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x81, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x10001, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x1ff, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x101, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x1, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x4, 0x100, 0x1000, 0x7, 0x6, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001})
poll(&(0x7f0000000bc0)=[{r2, 0x210c}], 0x1, 0x6)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

4m19.712240877s ago: executing program 34 (id=2273):
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x8000004, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40009c0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x18080, 0x0) (async)
r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) (async, rerun: 32)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000280)=""/202, 0x302000, 0x0, 0xa}, 0x20) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
statx(0xffffffffffffff9c, &(0x7f0000002880)='\x00', 0x1000, 0x7ff, &(0x7f00000028c0))
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) (async, rerun: 32)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00a081b1f4000904000001362434000905df03"], 0x0) (rerun: 32)

4m19.231797194s ago: executing program 35 (id=2275):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x4a33248eda255e64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fsetxattr$security_evm(r1, &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="030108000000030000db8545b6eb833bbb6a7346ece107f35304a8cef14cbd063aea3ef8401d60a76b867f854a722a3113a9389d35f20e436d0000000057e41860e0614e13ebebcfa35b1507bf7bf64e0100000000000000db50"], 0x9, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/131, 0x83}, {&(0x7f0000000300)=""/4097, 0x1001}, {&(0x7f0000003180)=""/243, 0xf3}, {&(0x7f0000001340)=""/120, 0x78}], 0x4}, 0x81}], 0x4, 0x40010132, 0x0)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r3 = io_uring_setup(0x601e, &(0x7f0000000580)={0x0, 0xba3a, 0x8, 0x2, 0x33e})
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="000000c1366b8ade7db2b5d248bdd65efb5124f0623158a8e30801d83b304db031f74806a1876ff2302330d505b9f95e408399e92206cbf81f9c87d753473ea7462efc7867206253ac1c369271304b11ffdc3b9ce9d7bce9f632faf367ec9b18d775da59e4b6e958c91e3834730cf4a09e64f69371d887001c67d21e2ff58f7c99b831d03175e6c7eefd552182c659721a793b25e96ae42c0e5b3b219df6eee91e54dc05a5f4b187f5acd7136250b078062d3147078ab73139740874ff717a100e97cf3174b46515f73ddc653f0686086b62289b21f9258329a5f6a80a92b917a287c8ee3f23", @ANYRES32=0x0, @ANYBLOB="490002000008000014001280090001007663616e0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)

12.214011841s ago: executing program 7 (id=3142):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@private1, 0x99e1, 0x3, 0x3, 0xc, 0x5, 0x2}, 0x20)
r2 = syz_io_uring_setup(0x4b9, &(0x7f0000010400)={0x0, 0xb117, 0x4, 0x1, 0x202}, &(0x7f0000000500), &(0x7f0000000180), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x800)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f0000000440), 0x2}, 0x20)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x4}, {0x0, 0x0, 0x1000}], 0x2)
semop(r4, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5ebd26a935ad170900000021000000000a0000000000000004000400"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io$uac2(r7, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12150001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r7, 0x0, 0x0)

10.027661809s ago: executing program 8 (id=3152):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000ac0)=0x7fff0000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000000})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x4211, r4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.780482726s ago: executing program 8 (id=3153):
syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xfc, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x9, {0x9, 0x21, 0xfffc, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x49}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x6, 0x81}}]}}}]}}]}}, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x44082, &(0x7f0000001940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d117dfcfb84098247536ae1b88179a8eda48910ed5734924f0afb5a21f353e0d88ab3bcac1956cc38a654120d037e833a753c072855622917537698414a3587c3bf4887ff8e0666b20cf298c2185ee408e87a4ec52edd626dcbaba75015505395fb276b25dbc6f6e6fb6aae98d8f6819b38dad1cf2f9656f7d310cd4c6ac1944ad500b5bf9d1b8d9ea2d21533580069e6", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,\x00'])
r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000180)={0x34, &(0x7f0000000440)={0x40, 0x17, 0x45, "8fe4f06eb98998052542998a59f2b8d6c14faf8d7a31949e8adee6d827231701650002000000000000a4d052d28b413e8ff81cb9e35a96d4159816b5f14dfdd9f0a4d4d28ffdfedcaab04d0394d9c5ea892e6095e548f8b546a8d94196c33f883d75eff947a9482d12dad81ac25f308349fe2bd001bf53292d5f32ec749d1f4f1f8339a14880d1554984e74dfd8a"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x29, 0x8, 0xdb0078e61cb35fff, 0x5, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xffffffffffffffff, 0x4, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0xbe, 0xfffffffa, 0x406, 0x4000, 0x1, 0xee00, 0xffffffffffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utime(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)

9.154935234s ago: executing program 6 (id=3158):
sysfs$2(0x2, 0xc9f, &(0x7f0000000080)=""/42)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000026006bab9a3fe3d86e17a2beaa31106b876cff0000007ea62b815749c08b78a817d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f62e5ff87e2433e018ec00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0xd)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xc)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8334, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xa696, 0x0, 0xffffffffffffffff, 0x4ddd2a04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x22, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x200}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

8.467284747s ago: executing program 5 (id=3163):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB=')rdma'], 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x0, 0xd802, 0x5, 0xff, 0xfffffffffffffff8, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0xffff, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000280))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x4}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000032)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0xeeee0000, 0xc, 0xe0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0xab, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x47, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x3, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x18, 0x6, 0x2, 0x7}, {0x80a0000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB], 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, 0x0, 0x4008094)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

8.226421377s ago: executing program 6 (id=3164):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = syz_io_uring_setup(0x30f3, &(0x7f0000000200)={0x0, 0xe7ff, 0x400, 0x4, 0x18}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) (rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

8.130876062s ago: executing program 7 (id=3165):
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00')
getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}}, 0x4000000)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002", @ANYRES64=r0], 0x48)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000280)="cf804e90a6ff485d", 0x8}], 0x1, 0x8, 0x2)
syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000103512148240000102030109027a00030103802f0904000000010100000a2401bb000a0002010209040100000102000009040197eb010200000a24020202005cb8f9010324010202021009240201060801043609050109ff"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})

6.173728693s ago: executing program 8 (id=3169):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}}, 0x4000080)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
epoll_create(0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0)
r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')

6.073874197s ago: executing program 7 (id=3171):
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af83, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB], 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r3, 0x9)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000300)=0x3)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d000041a15be2d9d13cd1cb0c238e61cfd6a5d7cd0eaa50e027db032ddbfe85e53b87eb950a45", 0x56}], 0x1, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0xf0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7fff, 0x2, 0x1, {0x22, 0x62b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xb, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xe, 0x2, 0x4}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x2, 0x40, 0xfd, 0x10, 0x9}, 0x68, &(0x7f0000000880)={0x5, 0xf, 0x68, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "48a1db88102d659e34f64fd9ef7890f2"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x83, 0x7, 0x1, 0x81, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7fffff8, 0xf000, 0x800, [0xffcf, 0x3fc0, 0xcf, 0xc0ff, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x100, 0xf000, 0x1, [0x3f00, 0xff00, 0x3f00, 0xcf, 0x3f00, 0xffff]}]}, 0x8, [{0x64, &(0x7f0000000800)=@string={0x64, 0x3, "2d022745ba80d82e591516b5f5d1bc70fbfc60fbac723d80c5efde017059c651152088c5937194a275a8ba0316acbe0a2335b7bfdd81b8d4d6f5ad8e647ac064062322d66ca7cbdf6cef70c678d134814062e63e8df14b0b9ffafa196308787aaa85"}}, {0x9e, &(0x7f0000000d80)=ANY=[@ANYBLOB="9e0345bf478290408c7b37820ec638951624670281cc0278cbb629763e72b14149cbe76dfbe3645506cffa4881aec6d4ce60e88a0f438712a4836c735e7379025dc9f9dadbde45674ff501ddf9c6a4f0df2a2667fa410fa601bcda0d7421d9c337e3fe3af4a51ba4d98678aa9d0b040004e2d25543b7dffb389fe015d1837d9b411229af62c6fb84814909ba5015b395265fa42eca0a2c8408c637d9bf53b912fac2c522546fec"]}, {0xc5, &(0x7f0000000ec0)=@string={0xc5, 0x3, "50b8224067cddbddfe65bd7b29c48f18bc90eb3bf82fd95dc9678fb984350e27769686b5b25366ea588d0e2ca60f6323192f63dbec7b7c731d6802a1da4afd18abeb96463b523e1e8450c64b11ac50e35064e3d738ec6069400daa39851c7b6815876ef5d1ae8f195996f97c8afefbad8f5b49b5f12bad8d81b24c5d8597366ae030c3b754c514cb2fbf18c1999aa761d561400d6e2135177f9f05b7c1b63b4b70493404219f7aa2f2592738e28d79e88089e05bd0bf5ded118e216f7723277850de6c"}}, {0x8a, &(0x7f0000000900)=@string={0x8a, 0x3, "bbc0d6ad344e8c8f9f22d2a596f9ded54727490c209518338d76d219eee75ad2e5a7f4ad39bb01dc3d26d80eba44337ff2cc2d30bf6df27bb4640230913dfe351806fdb88fde75d44a3a0ef478367b2ca3ecc93c17d880793560c888169b12a304215f5d274c2bcef59c40605b0643022b565bfe2ca1ddcc3b5deae8b98d4a062c5969ee9f1bf0fa"}}, {0x99, &(0x7f00000009c0)=@string={0x99, 0x3, "dc9d470f6ee273aa6c8fcc196b124f2fa3dc5dd95539c3ac6a23d4ac382655cfa4f6266ea0e5b0f2bcdc20c98ace2e76b9f56dbd76347adc68021c437072ebbd37ff9449766bd47e7e68b3ebd7af6a051b70129d2b04e3d7af378b9cdeb500c80b63c4caa01829e9f58a70ef7fb34c41f88222add8c5d0b2f241cdc0836868895349188042eeed5d3be2b94eaee7ec09c4b3b0084966af"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x816}}, {0xdd, &(0x7f0000000ac0)=@string={0xdd, 0x3, "d6288ea27130de0228d87329c140bcb6151c78e3c4c9a7c2b11af5b1301f22ca1c61e738f8c2092120ae5cea105d7952dd330b90e156165829731393461b119f09d4eb7bef03d8c872d9cb12495238676e5d2da18ea5a5c92a65695ff2a6372215797119b170305c7c76ec62cffb4972b46c76706a3face45b8243e251c1e1e52528c0c335a611c029a4a681a7039679c486572bf5f379ce81a336fe2da1efbb5336b651105921cf5212444d6bb16227dfbe70dd66d58e256a6fc5e4248cdedfa7f69c65f889f35410111489520ccc0c68a69df55ce0c9f1c30fcf"}}, {0xfb, &(0x7f0000000bc0)=@string={0xfb, 0x3, "b034d7872797ae76c317c93db87e3ce86f782571b9f789bfeb7f8687a74084d49ba9a2991ed191b273e46ee75b51fd9a0b65404a325d6bd73202353c9151f941eb2344ee7a4b7f591617049a2d877c0485dd38946d474f98c0438001800a3c4e99057d17b0766f49e59f462d812e76e384b0c899b4ab05b50699b2dacc8e86b75a3b8a5d60fc98207d8e6899f02fa56c3b1c772aa98fe504a7b685e1db06777616a135b38842c0261abb4acbf9edd484e947881eeb81d2e0b5c5e506ddae4698a41be1555796d14609de8e1fb8bbecf6e7ada0a5f02c491c8432d3795f484faa364da0e388d2645a3ed5821414c7683cb9fd2f5f1262acc701"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x20, 0xa, 0x5, 0x6}, {0x9, 0x5, 0xf, 0x2, 0x200, 0xff, 0x6f, 0x1}, {0x9, 0x5, 0xe, 0x3, 0x3ff, 0x3, 0x7, 0x81}}}}}}]}}, 0x0)
capget(0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r7 = syz_usb_connect$cdc_ecm(0x0, 0x6b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0xf0, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "ad6ec3"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x1, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0xe3, 0x6, 0x81}, @dmm={0x7, 0x24, 0x14, 0x6, 0x200}, @network_terminal={0x7, 0x24, 0xa, 0x68, 0x4, 0xf7, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x1d}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x40, 0x6, 0x6, 0x10, 0x6}, 0xec, &(0x7f00000000c0)={0x5, 0xf, 0xec, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7c, "63a5b5d9b40cb281b201b82af66514fd"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "65770933ccd304e522f05b97248da280"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "af494ca66aa92977bf0c5a7329a4c499"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x2, 0xc9e}, @generic={0xa4, 0x10, 0x2, "a4cbd5ae0308547b8d21235a9b66988b4301e6143e68ac24bd7e8d37b8c4649befdfea160c774f205b1f629628f8e678975211f61c6828a9176a0bea584fbb6161e380ac15e3e2387e5851f653eda226c1aa36fb76754e19d0307ba366278de52b4be0a6de8a1e4cdaccfc443058337fa9c9504d588c6cd1033fa9aab14d23cf47c15b5ed67822a0ac92f0284eb2e92dc8f6b47ec74ababcc61acacf75221af8be"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x82, &(0x7f0000000300)=@string={0x82, 0x3, "b79607026eab09f3ab1159cc7243e92ff582219e6d345aa6573e2581fa2ef72cffa037e0978bc9dc951facc23892d796b2540449a1423766f3e51bc3a78dcb007ac6e9f1429204b23e804773d080bf063df9b70ce8fd8f128e47d04fa61ef2df8816f2e9e0d1a1cde33e7bee0d65e99a7f439e223025181aeadad892b98d1861"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x419}}]})
syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x0, 0xc, 0xe, {0xe, 0x16, "c43a4499c4e83a595d993179"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000540)={0x20, 0xf, 0x84, "000caa1dbe28c631fb8a4f97cfbd34a306a69cf37c7d759977cafa3817e12d27664e79bcfa3ebdec80a3e5fb12a66513c213956eb953e8b2619265a68882c42d8af080ee1bc9ffa84a642d286c502ea2aade035483155c77f794e6f876d52bc643a47d7eff340dcdd83bba68c7d7e1b0c3c6df2c5c2bc1dfce38443c41a390a2d22d7439"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}})

5.977400602s ago: executing program 2 (id=3172):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r4, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x5, 0x9, 0x7, 0x1, 0x2, 0xd9b4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x4, 0x3, 0x2}}]}, @TCA_NETEM_CORR={0x10, 0x1, {0x6318, 0x7, 0x3}}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x3)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x1, &(0x7f0000000140), 0x4)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r9, @ANYBLOB="460609000055fd001c00128009000100626f6e240000b068d7d70000006e65be315503ed00000c00028008000408000000007a26949f675ccb893af5b6f971dfd378e5be6e86bbc1de4ffa9651"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r15 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x8f, 0x0, 0x34343459, 0x0, 0x0, [{}, {}, {}, {0x0, 0xfffffff8}, {0x0, 0x5}, {}, {}, {0xfffffffd}]}})
sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

5.620400246s ago: executing program 2 (id=3173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfe, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x20004814)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0)
ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000100)={r3, 0x0, 0x1888, 0x1, 0x2, 0x1, [0x12, 0x6, 0x6, 0x5, 0x1, 0x8]})
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
socket$kcm(0xa, 0x3, 0x87)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r6], 0xfdef)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r2)

5.312132634s ago: executing program 6 (id=3174):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010026bd7000fcdbf62500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003007465616d30000000000000000000000008000400d4000000300016802c0001802800010000800000bbbbbbbbbbbb00"/84], 0x6c}}, 0x20084084)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c010000160033060000000000000080640101000000000000000000000000007f00000100000000000000000000000000000000000000000a00000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff000000000000000005000000000000000400000002000000a06ace3d0600000002000000000004181900000000000000ac0007007f00079367ff5bf2fa79de7ccf71ad510001000000000000000000000000ac1414bb0000000000000000000000004e25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000003000000000000000100000000000000fa0000000000000009000000000000002f0d0000000000003c000000000000000080000000000000080000000000000081000000000000000900000000000000400000000000000004000000b26b6e000101000300000000"], 0x19c}}, 0x40004)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
r7 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f00000000c0)={0x3}, 0x0)
close(0x3)
memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa@\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ4\x86\xb9\x01\x00'/1134, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0)

5.308420564s ago: executing program 2 (id=3175):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000980)={0x5}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

5.006527933s ago: executing program 8 (id=3176):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)
ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000340)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0x4, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0xa3, 0x11, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}], 0xfffffffd})
r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x20000)
read$hiddev(r4, &(0x7f0000000080)=""/129, 0x81)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x10, 0xa, 0x30, 0x0, 0x87}, {0xfffffffffffffff7, 0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x840)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
symlink(0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet(r7, &(0x7f00000004c0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x4000000)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

4.814096077s ago: executing program 2 (id=3177):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)

4.647677565s ago: executing program 8 (id=3178):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x3)
r1 = accept4(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000140)=0x80, 0x80000)
sendmsg$kcm(r2, 0x0, 0x40000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721", 0x9c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xb0, 0x3b, 0x6e, 0x10, 0x4b4, 0x1002, 0x16d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x5, 0x0, 0x8, "", [{{0x9, 0x4, 0x85, 0x5, 0x0, 0x47, 0x74, 0x4c, 0xe0}}, {{0x9, 0x4, 0xf5, 0x93, 0x0, 0x63, 0x5a, 0x65, 0x4}}]}}]}}, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x4)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r0, 0x0, 0x0, 0x400000000000000)

4.288164816s ago: executing program 2 (id=3179):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x7ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/133, 0x85}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x100000000000027e}, 0xfffffffc}], 0x2, 0x42, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xd}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x5f, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000010)
fallocate(r1, 0x0, 0x1000000, 0x3)
syncfs(r1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020)

4.283817293s ago: executing program 5 (id=3180):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0)
read(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000008060108000000000000000000000009140007800800084000000017050014000a0000000500010006"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4.126927271s ago: executing program 5 (id=3181):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10005, 0x14f600)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001"], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000700", "f4bd000000801900", [0x0, 0x31]}})

4.082257901s ago: executing program 6 (id=3182):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f00000004c0)}], 0x2}, 0x4000)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2)

3.985303645s ago: executing program 2 (id=3183):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
fstat(0xffffffffffffffff, 0x0)
r2 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x0, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x260, 0xc8, 0xc8, 0x8, 0x0, 0x5803, 0x190, 0x2e8, 0x2e8, 0x190, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x7, 0x7, 0x4a}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x31d)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x200ce, 0x4)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00')
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000800)={r5, &(0x7f0000000700)='.-^\x00', 0x121800, &(0x7f0000000740)={@_ha_fsid={[0x147, 0x80]}, {0xfff3, 0x61, 0x6, 0x6}}, 0x7fff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x22acd7f6})
pread64(r6, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200)
r7 = socket(0x2a, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

3.966360145s ago: executing program 5 (id=3184):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b413661d69f5eb"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458d2fdcb7ac00", "f4bd0000008019000000ab5600", [0x8, 0xffffffff9673e35d]}})

3.959848323s ago: executing program 6 (id=3185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d7f062416090212000100000000090401"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0)

3.694709338s ago: executing program 5 (id=3186):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
gettid()
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xf, 0xc}, {0xa6, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x35}, 0x4041090)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
epoll_create1(0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0xd}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x860)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0)

2.916149571s ago: executing program 7 (id=3187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x3)
ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x1) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x400c840) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) (async)
close(r2) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1)

2.696391391s ago: executing program 7 (id=3188):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x4a22, @private=0x8010102}, 0x5a)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x2004c044)
r2 = syz_open_dev$loop(0x0, 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000000)=0x6)

2.501268832s ago: executing program 7 (id=3189):
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
syz_open_dev$usbmon(0x0, 0x0, 0x301880)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = msgget$private(0x0, 0x593)
msgrcv(r0, &(0x7f0000001440)={0x0, ""/79}, 0x57, 0xb37474668a496883, 0x1000)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000480)={0x874, 0x7f, {r1}, {}, 0x0, 0xfffffc00})
socket$kcm(0x10, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)

1.42186075s ago: executing program 8 (id=3190):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x1f, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}})
r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@generic="6015326f"]}, @nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = socket(0xa, 0x5, 0x0)
listen(r3, 0x2000002)
listen(r3, 0x12)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1})
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0xffffff95})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)

166.480135ms ago: executing program 5 (id=3191):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/4088, 0xff8}], 0x1)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005)
r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800"], 0xac}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc))

0s ago: executing program 6 (id=3192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000957000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
io_setup(0x41, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x8, 0x0, r1, &(0x7f0000000080)="f022", 0x2, 0x1}])
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

kernel console output (not intermixed with test programs):

70222][ T6461] Registered IR keymap rc-empty
[  727.177393][ T6461] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  727.202380][ T6461] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input61
[  727.252545][ T6461] em28xx 6-1:0.0: Input extension successfully initialized
[  727.270129][ T5694] em28xx 6-1:0.0: Closing input extension
[  727.390718][ T6466] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  727.580786][ T6466] usb 9-1: Using ep0 maxpacket: 32
[  727.599354][ T6466] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  727.625740][ T6466] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  727.638752][ T6466] usb 9-1: config 0 interface 0 has no altsetting 0
[  727.651060][ T6466] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  727.661124][ T6466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.669187][ T6466] usb 9-1: Product: syz
[  727.674526][ T6466] usb 9-1: Manufacturer: syz
[  727.680861][ T6466] usb 9-1: SerialNumber: syz
[  727.688631][ T6466] usb 9-1: config 0 descriptor??
[  728.145643][ T6466] gs_usb 9-1:0.0: Configuring for 256 interfaces
[  728.174818][ T6466] gs_usb 9-1:0.0: Driver cannot handle more that 255 CAN interfaces
[  728.214507][ T5694] em28xx 6-1:0.0: Freeing device
[  728.215519][ T6466] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -22
[  728.522163][ T5694] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  728.691791][ T5694] usb 6-1: Using ep0 maxpacket: 32
[  728.712147][ T5694] usb 6-1: config 3 has an invalid interface number: 171 but max is 29
[  728.720991][ T5694] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 30
[  728.745669][ T5694] usb 6-1: config 3 has no interface number 0
[  728.770105][ T5694] usb 6-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0
[  728.790075][ T5694] usb 6-1: config 3 interface 171 has no altsetting 0
[  728.808810][ T5694] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  728.831719][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  728.845591][ T5694] usb 6-1: Product: syz
[  728.854250][ T5694] usb 6-1: Manufacturer: syz
[  728.868378][ T5694] usb 6-1: SerialNumber: syz
[  729.173050][ T6464] usb 9-1: USB disconnect, device number 14
[  729.175392][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.206048][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.310324][T15815] IPVS: set_ctl: invalid protocol: 3 64.0.0.250:2560
[  729.329901][T15815] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  729.503444][ T5694] as10x_usb: device has been detected
[  729.527900][ T5694] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  729.569696][ T5694] usb 6-1: DVB: registering adapter 4 frontend 0 (Sky IT Digital Key (green led))...
[  729.643671][ T5694] as10x_usb: error during firmware upload part1
[  729.669217][ T5694] Registered device Sky IT Digital Key (green led)
[  729.677522][ T5694] usb 6-1: USB disconnect, device number 96
[  729.736106][ T5694] Unregistered device Sky IT Digital Key (green led)
[  729.743569][ T5694] as10x_usb: device has been disconnected
[  729.831735][ T6459] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  729.904672][T15826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  729.996180][ T6459] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  730.008237][ T6459] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  730.021208][ T6459] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  730.030869][ T6459] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.039104][ T6459] usb 9-1: Product: syz
[  730.044542][ T6459] usb 9-1: Manufacturer: syz
[  730.049540][ T6459] usb 9-1: SerialNumber: syz
[  730.057933][ T6459] usb 9-1: config 0 descriptor??
[  730.335397][ T6466] usb 9-1: USB disconnect, device number 15
[  730.525883][T15839] fuse: Bad value for 'fd'
[  730.614291][T15843] loop9: detected capacity change from 0 to 7
[  730.639140][T15843] Dev loop9: unable to read RDB block 7
[  730.661709][T15843]  loop9: AHDI p1 p2 p3
[  730.676084][T15843] loop9: partition table partially beyond EOD, truncated
[  730.703461][T15843] loop9: p1 start 1920169572 is beyond EOD, truncated
[  730.727466][T15843] loop9: p2 start 1851744889 is beyond EOD, truncated
[  730.740584][ T6459] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  730.761806][ T6466] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  730.841043][ T5694] usb 8-1: new low-speed USB device number 15 using dummy_hcd
[  730.940809][ T6466] usb 9-1: Using ep0 maxpacket: 16
[  730.947691][ T6459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.972042][ T6459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.977550][ T6466] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8
[  730.982877][ T6459] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  731.022733][ T6459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.038410][ T5694] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  731.056612][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2818'.
[  731.082539][ T5694] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  731.106787][ T6466] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  731.108255][ T5694] usb 8-1: New USB device found, idVendor=2f34, idProduct=0802, bcdDevice= 0.00
[  731.125640][ T6466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.128568][ T6459] usb 6-1: config 0 descriptor??
[  731.163113][ T5694] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.173029][ T6466] usb 9-1: Product: syz
[  731.179489][T15846] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  731.203243][ T6466] usb 9-1: Manufacturer: syz
[  731.222526][ T6466] usb 9-1: SerialNumber: syz
[  731.302039][ T6466] usb 9-1: config 0 descriptor??
[  731.334689][ T6466] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  731.375814][T15857] openvswitch: netlink: Flow key attr not present in new flow.
[  731.386167][ T6466] usb 9-1: Detected FT232R
[  731.576257][ T6466] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  731.609701][ T6466] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  731.631551][ T6461] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  731.641972][ T6459] hid-led 0003:1D34:000A.002A: item fetching failed at offset 0/3
[  731.642777][ T6466] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71
[  731.716823][ T6459] hid-led 0003:1D34:000A.002A: probe with driver hid-led failed with error -22
[  731.748935][ T6466] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  731.806789][ T6466] usb 9-1: USB disconnect, device number 16
[  731.872377][ T6461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  731.909186][ T6461] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1022, setting to 64
[  731.952777][ T6466] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  731.999799][ T6461] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  732.018271][ T6466] ftdi_sio 9-1:0.0: device disconnected
[  732.019681][ T6461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.058413][ T6461] usb 3-1: Product: syz
[  732.078353][ T6461] usb 3-1: Manufacturer: syz
[  732.083797][ T6461] usb 3-1: SerialNumber: syz
[  732.129294][T15834] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2811'.
[  732.313020][ T5694] usbhid 8-1:4.0: can't add hid device: -71
[  732.342683][ T5694] usbhid 8-1:4.0: probe with driver usbhid failed with error -71
[  732.353982][ T6461] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  732.375253][ T5694] usb 8-1: USB disconnect, device number 15
[  732.384706][ T6461] usb 3-1: USB disconnect, device number 124
[  732.452437][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2823'.
[  732.471019][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2823'.
[  732.540795][ T6466] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  732.733859][ T6466] usb 9-1: Using ep0 maxpacket: 16
[  732.758572][ T6466] usb 9-1: unable to get BOS descriptor or descriptor too short
[  732.781661][ T6466] usb 9-1: config 1 has an invalid interface number: 237 but max is 0
[  732.800987][ T6466] usb 9-1: config 1 has no interface number 0
[  732.820852][ T6466] usb 9-1: config 1 interface 237 has no altsetting 0
[  732.845505][ T6466] usb 9-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  732.868144][ T6466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.892683][ T6466] usb 9-1: Product: ⷎ밹潿�ড়웧ﶘ꘮蜞ⅴ傺�碌�㿻슸ᶿ䅳ᒪＥ癹ɨꧾ䙶臰秵㢲�숄䗖組�冘樄⹭㬅鱾욳挥쟋䆗筒忡뢕�署鹑��Ⱬ䉀㞋鰌䨽䣮ḹꑸ�䇪�褙䈾⺬廼⋖쎒鞿픲⚗��粇龾畖拮溧똋��ᘦ㘡᫘�＂ῤᇡ砡뱌﭅葼벌뵺�칶ꣲ픜헚�㨷�
[  732.974534][ T6466] usb 9-1: Manufacturer: 勉
[  732.993029][ T6466] usb 9-1: SerialNumber: у
[  733.386951][T15869] binder: 15868:15869 ioctl c0306201 200000000080 returned -14
[  733.515128][   T29] usb 6-1: USB disconnect, device number 97
[  733.617507][T15891] loop5: detected capacity change from 0 to 7
[  733.638289][T15891] Dev loop5: unable to read RDB block 7
[  733.660912][T15891]  loop5: unable to read partition table
[  733.677627][T15891] loop5: partition table beyond EOD, truncated
[  733.713228][T15891] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  733.723851][ T6466] ipaq 9-1:1.237: PocketPC PDA converter detected
[  733.749568][ T6466] ipaq 9-1:1.237: probe with driver ipaq failed with error -71
[  733.786700][ T6466] usb 9-1: USB disconnect, device number 17
[  733.978901][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2830'.
[  733.991760][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2830'.
[  734.465630][T15921] No memory to map
[  734.536943][T15921] input: syz1 as /devices/virtual/input/input62
[  734.668990][T15921] ip6tnl0: Caught tx_queue_len zero misconfig
[  734.683222][T15921] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[  734.746907][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2835'.
[  735.247096][T15935] loop5: detected capacity change from 0 to 7
[  735.333601][T15935] Dev loop5: unable to read RDB block 7
[  735.366076][T15935]  loop5: unable to read partition table
[  735.382479][T15935] loop5: partition table beyond EOD, truncated
[  735.419530][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2836'.
[  735.433328][T15935] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  735.861785][T15945] kvm: emulating exchange as write
[  736.426940][T15960] binder: 15957:15960 ioctl 89f1 200000000800 returned -22
[  736.817178][T15963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  737.951733][T15958] syz.7.2845 (15958): drop_caches: 2
[  737.992614][T15984] loop5: detected capacity change from 0 to 7
[  738.019327][T15984] Dev loop5: unable to read RDB block 7
[  738.035801][T15984]  loop5: unable to read partition table
[  738.047955][T15984] loop5: partition table beyond EOD, truncated
[  738.073013][T15984] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  738.118342][ T4994] Dev loop5: unable to read RDB block 7
[  738.151832][ T4994]  loop5: unable to read partition table
[  738.174292][ T4994] loop5: partition table beyond EOD, truncated
[  738.391804][ T6466] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  738.568590][ T6466] usb 6-1: unable to get BOS descriptor or descriptor too short
[  738.582671][T16007] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2858'.
[  738.617187][ T6466] usb 6-1: config 3 has an invalid interface number: 92 but max is 0
[  738.651133][ T6466] usb 6-1: config 3 has no interface number 0
[  738.680838][ T6466] usb 6-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid maxpacket 1072, setting to 1024
[  738.697110][T16009] xt_hashlimit: size too large, truncated to 1048576
[  738.721824][T16009] xt_NFQUEUE: number of queues (10) out of range (got 65542)
[  738.732867][ T6466] usb 6-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  738.778444][ T6466] usb 6-1: config 3 interface 92 altsetting 1 endpoint 0x8B has invalid wMaxPacketSize 0
[  738.844004][ T6466] usb 6-1: config 3 interface 92 has no altsetting 0
[  738.882564][ T6466] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7
[  738.935763][ T6466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.975584][ T6466] usb 6-1: Product: syz
[  738.997125][ T6466] usb 6-1: Manufacturer: syz
[  739.011842][ T6466] usb 6-1: SerialNumber: syz
[  739.060910][T16017] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  739.073645][T15988] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  739.093988][T16017] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  739.229507][   T30] audit: type=1326 audit(1778863011.978:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.8.2861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb83b9ce59 code=0x0
[  739.355940][T15988] fuse: Unknown parameter '0x0000000000000007'
[  739.362798][T15989] fuse: Unknown parameter '0x0000000000000007'
[  739.547477][T16033] loop5: detected capacity change from 0 to 7
[  739.584812][T16033] Dev loop5: unable to read RDB block 7
[  739.593300][ T6466] usb 6-1: probing VID:PID(0424:012C)   
[  739.608367][ T6466] usb 6-1: vub300 testing BULK OUT EndPoint(0) 03
[  739.609048][T16033]  loop5: unable to read partition table
[  739.623734][ T6466] usb 6-1: vub300 testing UNKNOWN EndPoint(1) 8B
[  739.637380][ T6466] usb 6-1: vub300 ignoring EndPoint(1) 8B
[  739.651913][T16033] loop5: partition table beyond EOD, truncated
[  739.655805][ T6466] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[  739.671900][T16033] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  739.723157][ T6466] vub300 6-1:3.92: probe with driver vub300 failed with error -22
[  739.746190][ T4994] Dev loop5: unable to read RDB block 7
[  739.763150][ T4994]  loop5: unable to read partition table
[  739.771855][ T6466] usb 6-1: USB disconnect, device number 98
[  739.786907][ T4994] loop5: partition table beyond EOD, truncated
[  740.210116][ T6461] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  740.380718][ T6461] usb 3-1: Using ep0 maxpacket: 16
[  740.412030][ T6461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  740.457201][ T6461] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  740.480782][ T6461] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  740.512792][ T6461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.533485][ T6461] usb 3-1: Product: syz
[  740.542851][ T6461] usb 3-1: Manufacturer: syz
[  740.555829][ T6461] usb 3-1: SerialNumber: syz
[  740.602470][ T6461] usb 3-1: 0:2 : does not exist
[  741.042814][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.079425][T16061] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2870'.
[  741.086268][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.213507][T16039] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig
[  741.352541][ T6461] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  741.448627][ T6461] usb 3-1: USB disconnect, device number 125
[  741.837200][T16076] syzkaller0: entered allmulticast mode
[  742.307669][T16079] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2878'.
[  742.569863][T16081] macsec0: entered allmulticast mode
[  742.757299][T16083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  742.819336][T16083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  743.100713][ T5694] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  743.282804][ T5694] usb 9-1: Using ep0 maxpacket: 32
[  743.302056][ T5694] usb 9-1: unable to get BOS descriptor or descriptor too short
[  743.320970][ T5694] usb 9-1: config 1 has an invalid interface number: 255 but max is 2
[  743.343535][ T5694] usb 9-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config
[  743.375095][ T5694] usb 9-1: config 1 has no interface number 2
[  743.395924][ T5694] usb 9-1: too many endpoints for config 1 interface 1 altsetting 1: 121, using maximum allowed: 30
[  743.431388][ T5694] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 121
[  743.460295][ T5694] usb 9-1: config 1 interface 255 has no altsetting 0
[  743.477302][ T5694] usb 9-1: config 1 interface 1 has no altsetting 0
[  743.495846][ T5694] usb 9-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40
[  743.511589][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.532828][ T5694] usb 9-1: Product: syz
[  743.543152][ T5694] usb 9-1: Manufacturer: syz
[  743.554736][ T5694] usb 9-1: SerialNumber: syz
[  743.850655][ T5694] usb 9-1: USB disconnect, device number 18
[  744.410116][ T5694] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  744.456688][T16095] loop1: detected capacity change from 0 to 7
[  744.464616][T16095] Dev loop1: unable to read RDB block 7
[  744.478998][T16095]  loop1: unable to read partition table
[  744.485823][T16095] loop1: partition table beyond EOD, truncated
[  744.492974][T16095] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  744.580504][ T5694] usb 3-1: Using ep0 maxpacket: 32
[  744.594107][T16100] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2886'.
[  744.594148][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  744.644514][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  744.666086][ T5694] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  744.684473][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.705497][ T5694] usb 3-1: config 0 descriptor??
[  744.721246][ T5694] hub 3-1:0.0: USB hub found
[  744.923463][ T5694] hub 3-1:0.0: 26 ports detected
[  744.934610][ T5694] hub 3-1:0.0: insufficient power available to use all downstream ports
[  745.252707][T16106] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2889'.
[  745.506354][ T5694] usb 3-1: USB disconnect, device number 126
[  745.620621][   T29] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  745.780569][   T29] usb 8-1: Using ep0 maxpacket: 8
[  745.787569][   T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36)
[  745.797133][   T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1
[  745.806620][   T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0
[  745.816872][   T29] usb 8-1: config 250 has no interface number 0
[  745.823783][   T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  745.836500][   T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  745.848360][   T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  745.860074][   T29] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  745.876351][   T29] usb 8-1: config 250 interface 228 has no altsetting 0
[  745.886697][   T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  745.896954][   T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  745.906458][   T29] usb 8-1: Product: syz
[  745.911882][   T29] usb 8-1: SerialNumber: syz
[  745.927491][   T29] hub 8-1:250.228: bad descriptor, ignoring hub
[  745.934729][   T29] hub 8-1:250.228: probe with driver hub failed with error -5
[  746.132147][   T29] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  746.354735][T16111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.355172][T16111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.381466][T16123] loop1: detected capacity change from 0 to 7
[  746.382075][T16123] Dev loop1: unable to read RDB block 7
[  746.382101][T16123]  loop1: unable to read partition table
[  746.382218][T16123] loop1: partition table beyond EOD, truncated
[  746.382229][T16123] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  746.403348][ T5735] usb 3-1: new low-speed USB device number 127 using dummy_hcd
[  746.515824][T16126] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2897'.
[  746.564078][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  746.577891][ T5735] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  746.592211][ T5735] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  746.604638][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.624286][ T5735] usb 3-1: config 0 descriptor??
[  746.631558][T16118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  746.743313][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2898'.
[  746.848095][ T5735] usbhid 3-1:0.0: can't add hid device: -71
[  746.856564][ T5735] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  746.884252][ T5735] usb 3-1: USB disconnect, device number 127
[  747.039058][T16132] loop5: detected capacity change from 0 to 7
[  747.071951][T16132] Dev loop5: unable to read RDB block 7
[  747.077859][T16132]  loop5: AHDI p1 p2 p3 p4
[  747.083299][T16132] loop5: partition table partially beyond EOD, truncated
[  747.091671][ T6466] usb 8-1: USB disconnect, device number 16
[  747.098276][T16132] loop5: p1 start 14067644 is beyond EOD, truncated
[  747.109759][T16132] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  747.120299][ T6466] usblp0: removed
[  747.433957][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  747.440629][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  747.451414][T16138] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2901'.
[  747.767801][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2903'.
[  748.271361][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'.
[  748.294473][T16158] netlink: 'syz.2.2906': attribute type 5 has an invalid length.
[  748.304346][T16158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2906'.
[  748.345705][T16158] geneve2: entered promiscuous mode
[  748.352273][T16158] geneve2: entered allmulticast mode
[  748.366064][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  748.397746][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  748.427902][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  748.510698][ T6459] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  748.602511][T16164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2908'.
[  748.690384][ T6459] usb 6-1: Using ep0 maxpacket: 32
[  748.731525][ T6459] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.809396][ T6459] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  748.897647][ T6459] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  748.944256][ T6459] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  749.007734][ T6459] usb 6-1: Product: syz
[  749.067615][ T6459] usb 6-1: Manufacturer: syz
[  749.134040][ T6459] hub 6-1:4.0: USB hub found
[  749.345159][ T6459] hub 6-1:4.0: 2 ports detected
[  749.484186][T15102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  749.509263][T15102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  749.576159][T15102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  749.598248][T15102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  749.618678][T15102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  749.847773][T16169] loop5: detected capacity change from 0 to 7
[  749.855978][T16169] Dev loop5: unable to read RDB block 7
[  749.862483][T16169]  loop5: AHDI p1 p2 p3 p4
[  749.867064][T16169] loop5: partition table partially beyond EOD, truncated
[  749.874863][T16169] loop5: p1 start 14067644 is beyond EOD, truncated
[  749.882388][T16169] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  750.133733][  T185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.163996][  T185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  750.330123][T16174] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2912'.
[  750.413542][  T185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.424596][  T185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  750.648817][  T185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  750.661616][  T185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  750.751164][ T6459] hub 6-1:4.0: activate --> -90
[  750.860218][ T6461] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  750.892116][T16182] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2914'.
[  750.962487][T16156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  750.977726][T16156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.006655][T16182] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.014371][T16182] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.020623][ T6461] usb 9-1: Using ep0 maxpacket: 16
[  751.039264][ T6461] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.081226][ T6461] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.122728][ T6461] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  751.178588][ T6461] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  751.194433][T16167] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.219951][ T6461] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.222523][   T29] usb 6-1: USB disconnect, device number 99
[  751.228708][T16167] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.253906][ T6459] hub 6-1:4.0: hub_ext_port_status failed (err = -71)
[  751.264977][ T6461] usb 9-1: config 0 descriptor??
[  751.282301][T16167] bridge_slave_0: entered allmulticast mode
[  751.294486][ T6459] usb 6-1-port2: attempt power cycle
[  751.306084][T16167] bridge_slave_0: entered promiscuous mode
[  751.333214][T16167] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.350616][T16167] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.358271][T16167] bridge_slave_1: entered allmulticast mode
[  751.369777][T16167] bridge_slave_1: entered promiscuous mode
[  751.488957][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  751.508417][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  751.587000][T16167] team0: Port device team_slave_0 added
[  751.603581][T16167] team0: Port device team_slave_1 added
[  751.718872][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2913'.
[  751.733621][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2913'.
[  751.746822][T15102] Bluetooth: hci0: command tx timeout
[  751.785483][T16198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.790072][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2913'.
[  751.837368][T16198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.858540][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.904845][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.005557][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  752.283642][  T185] bond4 (unregistering): (slave ip6gretap1): Releasing active interface
[  752.649420][  T185] batman_adv: batadv0: Removing interface: gretap1
[  752.790203][ T5694] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  752.930627][ T5694] usb 7-1: device descriptor read/64, error -71
[  753.026530][  T185] .` (unregistering): Released all slaves
[  753.049431][  T185] bond1 (unregistering): (slave veth3): Releasing backup interface
[  753.060486][  T185] veth3: left promiscuous mode
[  753.067949][  T185] bond1 (unregistering): (slave veth5): Releasing backup interface
[  753.079344][  T185] bond1 (unregistering): Released all slaves
[  753.114954][  T185] bond2 (unregistering): Released all slaves
[  753.143416][  T185] bond0 (unregistering): (slave veth7): Releasing active interface
[  753.165917][  T185] bond0 (unregistering): Released all slaves
[  753.174523][ T5694] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  753.206309][  T185] bond3 (unregistering): Released all slaves
[  753.237457][  T185] bond4 (unregistering): Released all slaves
[  753.282553][T16167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  753.297034][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  753.334503][ T5694] usb 7-1: device descriptor read/64, error -71
[  753.342410][T16167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  753.435294][T16214] loop5: detected capacity change from 0 to 7
[  753.453293][ T5694] usb usb7-port1: attempt power cycle
[  753.459033][T16214] Dev loop5: unable to read RDB block 7
[  753.485738][T16214]  loop5: AHDI p1 p2 p3 p4
[  753.505567][T16214] loop5: partition table partially beyond EOD, truncated
[  753.525623][T16214] loop5: p1 start 14067644 is beyond EOD, truncated
[  753.566239][T16167] hsr_slave_0: entered promiscuous mode
[  753.572146][T16214] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  753.587078][ T6461] usbhid 9-1:0.0: can't add hid device: -71
[  753.594422][ T6461] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  753.610338][T16167] hsr_slave_1: entered promiscuous mode
[  753.639947][T16167] debugfs: 'hsr0' already exists in 'hsr'
[  753.647324][ T6461] usb 9-1: USB disconnect, device number 19
[  753.655600][T16167] Cannot create hsr debugfs directory
[  753.739075][  T185] ý��™: left promiscuous mode
[  753.800154][ T5694] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  753.820663][ T5634] Bluetooth: hci0: command tx timeout
[  753.879228][ T5694] usb 7-1: device descriptor read/8, error -71
[  753.932608][T16221] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2922'.
[  754.115050][  T185] tipc: Disabling bearer <udp:syz2>
[  754.121374][  T185] tipc: Left network mode
[  754.160193][ T5694] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  754.214255][ T5694] usb 7-1: device descriptor read/8, error -71
[  754.330885][ T5694] usb usb7-port1: unable to enumerate USB device
[  754.481616][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2924'.
[  755.413411][  T185] hsr_slave_0: left promiscuous mode
[  755.464198][  T185] hsr_slave_1: left promiscuous mode
[  755.910509][T15102] Bluetooth: hci0: command tx timeout
[  756.646978][T16291] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2930'.
[  756.878066][T16299] loop1: detected capacity change from 0 to 7
[  756.908388][T16299] Dev loop1: unable to read RDB block 7
[  756.942757][T16299]  loop1: unable to read partition table
[  756.959710][T16299] loop1: partition table beyond EOD, truncated
[  756.976157][T16299] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  756.990777][   T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  757.203522][   T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  757.227504][   T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  757.258999][   T29] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  757.297563][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  757.327869][   T29] usb 8-1: SerialNumber: syz
[  757.556389][T16248] syzkaller0: entered allmulticast mode
[  757.575748][   T29] usb 8-1: 0:2 : does not exist
[  757.845865][   T29] usb 8-1: USB disconnect, device number 17
[  757.981102][T15102] Bluetooth: hci0: command tx timeout
[  758.202128][T16324] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  758.220054][T16324] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  758.380372][   T29] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  758.575858][   T29] usb 7-1: Using ep0 maxpacket: 8
[  758.589509][   T30] audit: type=1326 audit(1778863031.328:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16323 comm="syz.7.2939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ecf99ce59 code=0x0
[  758.649313][   T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  758.682690][   T29] usb 7-1: config 16 has an invalid descriptor of length 149, skipping remainder of the config
[  758.723981][   T29] usb 7-1: too many endpoints for config 16 interface 0 altsetting 0: 61, using maximum allowed: 30
[  758.759606][   T29] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 61
[  758.807803][   T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  758.841524][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.185543][ T5694] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  759.325735][T16322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.362501][T16322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.420204][ T5694] usb 6-1: Using ep0 maxpacket: 32
[  759.444904][ T5694] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  759.474957][ T5694] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  759.502348][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  759.520179][ T5694] usb 6-1: Product: syz
[  759.530314][ T5694] usb 6-1: Manufacturer: syz
[  759.544114][ T5694] usb 6-1: SerialNumber: syz
[  759.562673][ T5694] usb 6-1: config 0 descriptor??
[  759.583987][T16320] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  759.680163][ T6459] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  759.840229][ T6459] usb 8-1: Using ep0 maxpacket: 16
[  759.860619][ T6459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3845, setting to 64
[  759.894780][ T6459] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  759.924238][ T6459] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.951513][ T6459] usb 8-1: Product: syz
[  759.963210][ T6459] usb 8-1: Manufacturer: syz
[  759.980929][ T6459] usb 8-1: SerialNumber: syz
[  760.002976][ T6459] usb 8-1: config 0 descriptor??
[  760.147025][ T6459] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  760.228413][ T6459] usb 8-1: USB disconnect, device number 18
[  760.238364][ T7332] usb 8-1: Failed to submit usb control message: -71
[  760.257376][ T7332] usb 8-1: unable to send the bmi data to the device: -71
[  760.265311][ T7332] usb 8-1: unable to get target info from device
[  760.272164][ T7332] usb 8-1: could not get target info (-71)
[  760.279232][ T7332] usb 8-1: could not probe fw (-71)
[  760.999173][ T5718] usb 6-1: USB disconnect, device number 104
[  761.295167][T16337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'.
[  761.368435][   T29] usb 7-1: USB disconnect, device number 29
[  761.568494][  T185] IPVS: stop unused estimator thread 0...
[  761.890693][   T29] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  762.073488][   T29] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  762.085207][T16167] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  762.105481][   T29] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  762.148962][   T29] usb 7-1: config 220 has no interface number 2
[  762.182029][   T29] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  762.243092][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  762.258620][   T29] usb 7-1: config 220 interface 0 has no altsetting 0
[  762.281672][T16167] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  762.291775][   T29] usb 7-1: config 220 interface 76 has no altsetting 0
[  762.323474][   T29] usb 7-1: config 220 interface 1 has no altsetting 0
[  762.361349][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  762.372341][   T29] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  762.393214][T16167] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  762.412327][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.451437][   T29] usb 7-1: Product: syz
[  762.468118][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  762.482016][   T29] usb 7-1: Manufacturer: syz
[  762.504710][   T29] usb 7-1: SerialNumber: syz
[  762.517859][T16167] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  762.602947][T16167] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  762.917702][T16358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  762.932910][   T29] usb 7-1: selecting invalid altsetting 0
[  762.952626][   T29] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  762.995992][   T29] uvcvideo 7-1:220.0: No valid video chain found.
[  763.007090][T16167] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.034987][   T29] usb 7-1: selecting invalid altsetting 0
[  763.052528][T16167] 8021q: adding VLAN 0 to HW filter on device team0
[  763.059737][   T29] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  763.077197][   T29] usb 7-1: USB disconnect, device number 30
[  763.077980][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.090751][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  763.150546][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.158150][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  763.487827][T16167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  763.632485][T16371] netlink: 'syz.6.2949': attribute type 4 has an invalid length.
[  763.837285][T16167] veth0_vlan: entered promiscuous mode
[  763.913076][T16167] veth1_vlan: entered promiscuous mode
[  764.011674][T16167] veth0_macvtap: entered promiscuous mode
[  764.035954][T16167] veth1_macvtap: entered promiscuous mode
[  764.088364][T16167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  764.111922][ T6464] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  764.142615][T16167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  764.170609][   T29] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  764.198338][T16270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  764.225196][T16270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  764.259772][T16270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.271674][ T6464] usb 7-1: Using ep0 maxpacket: 32
[  764.295187][ T6464] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  764.308738][T16277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.324249][ T6464] usb 7-1: config 0 has no interface number 0
[  764.347756][ T6464] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  764.362649][   T29] usb 8-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  764.393226][ T6464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.429955][   T29] usb 8-1: config 1 interface 0 has no altsetting 0
[  764.448792][ T6464] usb 7-1: Product: syz
[  764.466952][   T29] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40
[  764.481582][ T6464] usb 7-1: Manufacturer: syz
[  764.491070][   T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.514431][ T6464] usb 7-1: SerialNumber: syz
[  764.582065][   T29] usb 8-1: Product: syz
[  764.601993][ T6464] usb 7-1: config 0 descriptor??
[  764.614186][   T29] usb 8-1: Manufacturer: syz
[  764.656003][   T29] usb 8-1: SerialNumber: syz
[  764.680498][ T6464] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  764.743675][ T6464] usb 7-1: selecting invalid altsetting 1
[  764.757684][T16268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.796280][ T6464] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  764.817192][T16268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.854753][ T6464] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  764.899395][ T6464] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  764.943915][ T6464] usb 7-1: media controller created
[  764.997319][   T29] usbhid 8-1:1.0: can't add hid device: -71
[  765.028558][   T29] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  765.038093][ T6464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  765.065264][T16270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.088350][   T29] usb 8-1: USB disconnect, device number 19
[  765.100247][T16270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  765.176934][ T6464] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  765.206801][ T6464] zl10353_read_register: readreg error (reg=127, ret==-71)
[  765.233014][ T6464] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  765.808868][T16386] netlink: 'syz.5.2953': attribute type 4 has an invalid length.
[  765.859834][T16393] netlink: 'syz.5.2953': attribute type 4 has an invalid length.
[  765.944874][ T6464] usb 7-1: USB disconnect, device number 31
[  766.018564][T16386] xt_CT: You must specify a L4 protocol and not use inversions on it
[  766.053965][T16403] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2957'.
[  766.470558][ T6464] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  766.631170][ T6464] usb 7-1: Using ep0 maxpacket: 8
[  766.649918][ T6464] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  766.682856][ T6464] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  766.694630][ T6464] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  766.705371][ T6464] usb 7-1: config 250 has no interface number 0
[  766.714295][ T6464] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  766.731963][ T6464] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  766.747269][ T6464] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  766.761850][ T6464] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  766.778180][ T6464] usb 7-1: config 250 interface 228 has no altsetting 0
[  766.788918][ T6464] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  766.822545][ T6464] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  766.856292][ T6464] usb 7-1: Product: syz
[  766.887443][ T6464] usb 7-1: SerialNumber: syz
[  766.911919][ T6464] hub 7-1:250.228: bad descriptor, ignoring hub
[  766.947442][ T6464] hub 7-1:250.228: probe with driver hub failed with error -5
[  767.198246][ T6464] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  767.278520][T16422] netlink: 'syz.7.2962': attribute type 1 has an invalid length.
[  767.378931][T16422] 8021q: adding VLAN 0 to HW filter on device bond1
[  767.499789][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.542231][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.586071][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.608199][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.618543][T16428] loop5: detected capacity change from 0 to 7
[  767.675065][T16422] bond1: (slave veth3): Enslaving as an active interface with a down link
[  767.687242][T16428] Dev loop5: unable to read RDB block 7
[  767.694360][T16428]  loop5: AHDI p1 p2 p3 p4
[  767.699281][T16428] loop5: partition table partially beyond EOD, truncated
[  767.729797][T16428] loop5: p1 start 14067644 is beyond EOD, truncated
[  767.738018][T16428] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  767.842879][ T6464] usb 7-1: USB disconnect, device number 32
[  767.873487][ T6464] usblp0: removed
[  767.890524][ T6466] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  768.022952][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2965'.
[  768.072766][ T6466] usb 3-1: Using ep0 maxpacket: 32
[  768.096339][ T6466] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.108408][ T6466] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  768.122997][ T6466] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  768.136238][ T6466] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  768.149411][ T6466] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  768.183180][ T6466] usb 3-1: config 0 interface 0 has no altsetting 0
[  768.199567][ T6466] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  768.211069][ T6466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.227957][ T6466] usb 3-1: config 0 descriptor??
[  768.390572][T16439] batadv_slave_1: entered promiscuous mode
[  768.766178][ T6466] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0
[  768.776761][ T6466] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0
[  768.786736][ T6466] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0
[  768.795256][ T6466] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0
[  768.804275][ T6466] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0
[  768.817344][ T6466] hid-thrustmaster 0003:044F:B65D.002B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  768.830370][ T6466] hid-thrustmaster 0003:044F:B65D.002B: Wrong number of endpoints?
[  768.915914][T16443] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2968'.
[  768.983648][    C1] hid-thrustmaster 0003:044F:B65D.002B: Unknown packet type 0x0, unable to proceed further with wheel init
[  769.072008][T16439] batadv_slave_1: left promiscuous mode
[  769.104360][T16447] xt_policy: output policy not valid in PREROUTING and INPUT
[  769.199911][   T29] usb 3-1: USB disconnect, device number 2
[  769.360768][ T6466] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  769.534798][ T6466] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  769.554359][ T6466] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  769.577118][ T6466] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  769.598043][ T6466] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  769.624021][ T6466] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  769.637645][ T6466] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  769.647488][ T6466] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  769.656153][ T6466] usb 7-1: Product: syz
[  769.660958][ T6466] usb 7-1: Manufacturer: syz
[  769.671613][ T6461] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  769.673975][ T6466] cdc_wdm 7-1:1.0: skipping garbage
[  769.684974][ T6466] cdc_wdm 7-1:1.0: skipping garbage
[  769.696100][ T6466] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  769.702590][ T6466] cdc_wdm 7-1:1.0: Unknown control protocol
[  769.830349][ T6461] usb 9-1: Using ep0 maxpacket: 8
[  769.842977][ T6461] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  769.866305][ T6461] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 211, changing to 7
[  769.897785][ T6461] usb 9-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  769.919898][ T6461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.931749][ T6461] usb 9-1: Product: syz
[  769.935994][ T6461] usb 9-1: Manufacturer: syz
[  769.941084][ T6461] usb 9-1: SerialNumber: syz
[  770.040550][ T6466] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  770.138621][T16462] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  770.200746][ T6466] usb 3-1: Using ep0 maxpacket: 32
[  770.212591][ T6466] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  770.216574][ T6461] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  770.221886][ T6466] usb 3-1: config 0 has no interface number 0
[  770.234870][ T6466] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  770.246596][ T6466] usb 3-1: config 0 interface 85 has no altsetting 0
[  770.256726][ T6466] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  770.274565][ T6461] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  770.281389][ T6466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.281414][ T6466] usb 3-1: Product: syz
[  770.325093][ T6466] usb 3-1: Manufacturer: syz
[  770.336183][ T6461] usb 9-1: unable to issue vendor read request (ret = -71)
[  770.339730][ T6466] usb 3-1: SerialNumber: syz
[  770.365651][ T6461] usb 9-1: unable to issue vendor read request (ret = -71)
[  770.375277][ T6466] usb 3-1: config 0 descriptor??
[  770.385267][ T6461] usb 9-1: unable to issue vendor read request (ret = -71)
[  770.402125][ T6461] usb 9-1: unable to issue vendor read request (ret = -71)
[  770.420504][ T6464] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  770.482378][ T6461] usb 9-1: USB disconnect, device number 20
[  770.603064][ T6464] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  770.612189][ T6464] usb 8-1: config 0 has no interface number 0
[  770.632409][ T6464] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  770.644620][ T6465] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  770.685303][ T6464] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  770.726725][ T6464] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  770.738257][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'.
[  770.774105][ T6464] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.805195][   T29] usb 7-1: USB disconnect, device number 33
[  770.830577][ T6465] usb 6-1: Using ep0 maxpacket: 8
[  770.847099][ T6464] usb 8-1: config 0 descriptor??
[  770.854955][T16470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.859853][ T6465] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  770.888920][ T6465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  770.906894][T16470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.922511][ T6465] usb 6-1: config 0 has no interface number 0
[  770.960580][ T6465] usb 6-1: config 0 interface 52 has no altsetting 0
[  770.982750][ T6465] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  771.019385][T16458] geneve1: entered promiscuous mode
[  771.047568][ T6465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  771.049811][T16469] xt_hashlimit: size too large, truncated to 1048576
[  771.063867][T16458] macsec1: entered promiscuous mode
[  771.084469][T16458] macsec1: entered allmulticast mode
[  771.094216][ T6465] usb 6-1: config 0 descriptor??
[  771.105551][T16458] geneve1: entered allmulticast mode
[  771.144850][T16458] geneve1: left allmulticast mode
[  771.160361][T16458] geneve1: left promiscuous mode
[  771.326462][ T6466] appletouch 3-1:0.85: Failed to read mode from device.
[  771.334833][ T6465] usb 6-1: Can not set alternate setting to 1, error: -71
[  771.346772][ T6464] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.002C/input/input64
[  771.360501][ T6465] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71
[  771.374079][ T6466] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  771.395117][ T6465] usb 6-1: USB disconnect, device number 105
[  771.407603][ T6466] usb 3-1: USB disconnect, device number 3
[  771.497090][ T6464] holtek_kbd 0003:04D9:A055.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1
[  771.580194][ T6461] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  771.656529][   T30] audit: type=1326 audit(1778863044.408:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  771.696455][T16479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  771.717068][T16479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.725274][   T30] audit: type=1326 audit(1778863044.438:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  771.750911][ T6465] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  771.768637][ T6461] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  771.793748][   T30] audit: type=1326 audit(1778863044.438:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  771.794285][ T6461] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  771.860394][   T30] audit: type=1326 audit(1778863044.438:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  771.928235][ T6461] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  771.948198][ T5694] usb 8-1: USB disconnect, device number 20
[  771.974706][ T6461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.983407][   T30] audit: type=1326 audit(1778863044.448:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.012320][ T6461] usb 9-1: Product: syz
[  772.016940][ T6461] usb 9-1: Manufacturer: syz
[  772.035088][ T6461] usb 9-1: SerialNumber: syz
[  772.057948][ T6461] cdc_mbim 9-1:1.0: skipping garbage
[  772.065319][ T6461] usb 9-1: selecting invalid altsetting 1
[  772.072369][   T30] audit: type=1326 audit(1778863044.448:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.101600][   T30] audit: type=1326 audit(1778863044.448:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.155017][   T30] audit: type=1326 audit(1778863044.448:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.182261][   T30] audit: type=1326 audit(1778863044.448:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.239622][   T30] audit: type=1326 audit(1778863044.448:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16461 comm="syz.7.2975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecf99ce59 code=0x7ffc0000
[  772.534125][ T6461] usb 9-1: selecting invalid altsetting 1
[  772.540894][ T6461] cdc_mbim 9-1:1.0: bind() failure
[  772.775257][ T6464] usb 9-1: USB disconnect, device number 21
[  773.800390][ T6461] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  773.862776][T16473] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  774.050790][T16473] usb 9-1: Using ep0 maxpacket: 32
[  774.072793][T16473] usb 9-1: too many configurations: 17, using maximum allowed: 8
[  774.101551][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.138819][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.183954][T16473] usb 9-1: config 0 has no interface number 0
[  774.205560][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.242873][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.275551][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.284377][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.296085][T16473] usb 9-1: config 0 has no interface number 0
[  774.305941][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.341752][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.378749][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.388122][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.401515][T16473] usb 9-1: config 0 has no interface number 0
[  774.409079][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.421870][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.439293][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.456271][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.467842][T16473] usb 9-1: config 0 has no interface number 0
[  774.476526][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.489422][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.503774][T16504] loop5: detected capacity change from 0 to 7
[  774.514911][T16504] Dev loop5: unable to read RDB block 7
[  774.521575][T16504]  loop5: AHDI p1 p2 p3 p4
[  774.527880][T16504] loop5: partition table partially beyond EOD, 
[  774.528009][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.547180][T16504] truncated
[  774.551675][T16504] loop5: p1 start 14067644 is beyond EOD, truncated
[  774.558599][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.572870][T16504] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  774.582374][T16473] usb 9-1: config 0 has no interface number 0
[  774.591378][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.617218][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.675156][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.697619][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.742277][T16473] usb 9-1: config 0 has no interface number 0
[  774.756104][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.774554][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.802854][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.811711][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.836897][T16473] usb 9-1: config 0 has no interface number 0
[  774.844999][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.865171][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.883053][T16473] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  774.892416][T16473] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.920604][T16473] usb 9-1: config 0 has no interface number 0
[  774.927656][T16473] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  774.948320][T16473] usb 9-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  774.982988][T16473] usb 9-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  775.002624][T16473] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.015271][T16473] usb 9-1: Product: syz
[  775.045825][T16473] usb 9-1: Manufacturer: syz
[  775.059842][T16473] usb 9-1: SerialNumber: syz
[  775.085775][T16473] usb 9-1: config 0 descriptor??
[  775.119770][T16473] etas_es58x 9-1:0.2: Starting syz syz (Serial Number syz)
[  775.363617][T16473] usb 9-1: USB disconnect, device number 22
[  775.785246][T16525] netlink: 'syz.6.2994': attribute type 1 has an invalid length.
[  775.802895][ T6465] usb 6-1: unable to read config index 0 descriptor/start: -71
[  775.815126][ T6465] usb 6-1: can't read configurations, error -71
[  776.057876][T16538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2996'.
[  776.081930][T16538] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2996'.
[  776.120948][T16541] loop5: detected capacity change from 0 to 7
[  776.165753][T16541] Dev loop5: unable to read RDB block 7
[  776.187390][T16541]  loop5: AHDI p1 p2 p3 p4
[  776.202973][T16541] loop5: partition table partially beyond EOD, truncated
[  776.243767][T16541] loop5: p1 start 14067644 is beyond EOD, truncated
[  776.273182][T16541] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  776.360333][ T6459] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  776.533746][ T6459] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  776.553390][ T6459] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  776.569166][T16549] netlink: 'syz.5.3000': attribute type 1 has an invalid length.
[  776.581190][ T6459] usb 9-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  776.593728][ T6459] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.607025][ T6459] usb 9-1: Product: syz
[  776.612669][ T6459] usb 9-1: Manufacturer: syz
[  776.617630][ T6459] usb 9-1: SerialNumber: syz
[  776.704921][ T6461] usb 8-1: unable to get BOS descriptor or descriptor too short
[  776.728355][ T6461] usb 8-1: unable to read config index 0 descriptor/start: -71
[  776.748638][ T6461] usb 8-1: can't read configurations, error -71
[  777.142153][ T6459] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  777.185232][ T6459] usb 9-1: USB disconnect, device number 23
[  777.253953][T16559] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  777.410879][ T6465] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  777.592474][ T6465] usb 7-1: Using ep0 maxpacket: 16
[  777.617968][ T6465] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  777.632866][ T6465] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  777.644288][ T6465] usb 7-1: Product: syz
[  777.648487][ T6465] usb 7-1: Manufacturer: syz
[  777.654091][ T6465] usb 7-1: SerialNumber: syz
[  777.668365][ T6465] usb 7-1: config 0 descriptor??
[  777.863787][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3011'.
[  777.926992][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3011'.
[  778.317416][ T6459] usb 7-1: USB disconnect, device number 34
[  778.755920][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3012'.
[  778.981812][T16473] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[  779.075643][T16608] netlink: 'syz.6.3016': attribute type 10 has an invalid length.
[  779.141021][T16608] macvlan1: entered promiscuous mode
[  779.146470][T16608] macvlan1: entered allmulticast mode
[  779.173063][T16473] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  779.197668][T16473] usb 8-1: config 0 has no interface number 0
[  779.222865][T16473] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  779.264829][T16473] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  779.274681][T16608] veth1_vlan: entered allmulticast mode
[  779.307511][T16473] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  779.338514][T16473] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  779.364926][T16473] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  779.382744][T16473] usb 8-1: Product: syz
[  779.392252][T16473] usb 8-1: SerialNumber: syz
[  779.426188][T16473] usb 8-1: config 0 descriptor??
[  779.458964][T16473] cm109 8-1:0.8: invalid payload size 0, expected 4
[  779.478637][T16473] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input65
[  779.531364][T16608] team0: Port device macvlan1 added
[  779.669498][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.679705][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.687267][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.695633][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.710842][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.718963][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.727415][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.736185][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.744539][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.752477][    C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71
[  779.879534][T14204] usb 8-1: USB disconnect, device number 23
[  779.879537][    C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  779.911026][T14204] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  780.068011][T16614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  780.333509][ T6459] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  780.443750][T14204] IPVS: starting estimator thread 0...
[  780.522032][ T6459] usb 3-1: Using ep0 maxpacket: 32
[  780.554233][ T6459] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  780.560590][T16622] IPVS: using max 33 ests per chain, 79200 per kthread
[  780.598597][ T6459] usb 3-1: config 0 has no interface number 0
[  780.625430][ T6459] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  780.674311][ T6459] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  780.710124][ T6459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.742522][ T6459] usb 3-1: Product: syz
[  780.756563][ T6459] usb 3-1: Manufacturer: syz
[  780.777791][ T6459] usb 3-1: SerialNumber: syz
[  780.806788][ T6459] usb 3-1: config 0 descriptor??
[  780.829347][T16617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  781.050630][T16617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  781.080393][ T6461] usb 9-1: new low-speed USB device number 24 using dummy_hcd
[  781.180565][ T6464] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  781.245098][ T6461] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  781.350406][ T6464] usb 8-1: Using ep0 maxpacket: 8
[  781.362271][ T6464] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  781.378339][ T6464] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  781.426163][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  781.453298][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  781.490522][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  781.510606][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  781.540637][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  781.574169][ T6464] usb 8-1: config 168 interface 0 has no altsetting 0
[  781.592701][ T6464] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  781.610094][ T6464] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  781.642796][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  781.675966][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  781.709328][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  781.730466][ T5694] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  781.741945][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  781.770475][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  781.823223][ T6464] usb 8-1: config 168 interface 0 has no altsetting 0
[  781.841743][ T6464] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  781.860113][ T6464] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  781.880781][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  781.920759][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  781.930966][ T5694] usb 6-1: Using ep0 maxpacket: 16
[  781.942453][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  781.976064][ T6464] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  781.977983][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short
[  782.008994][ T5694] usb 6-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config
[  782.018088][ T6464] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  782.019937][ T5694] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024
[  782.047709][ T5694] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  782.080644][ T6459] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  782.095110][ T6459] asix 3-1:0.188: probe with driver asix failed with error -71
[  782.107136][ T6464] usb 8-1: config 168 interface 0 has no altsetting 0
[  782.107951][ T5694] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  782.133837][ T6459] usb 3-1: USB disconnect, device number 4
[  782.147697][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.167449][ T5694] usb 6-1: Product: syz
[  782.172560][ T5694] usb 6-1: Manufacturer: syz
[  782.191324][ T6464] usb 8-1: string descriptor 0 read error: -22
[  782.192151][ T5694] usb 6-1: SerialNumber: syz
[  782.209895][ T6464] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  782.241974][ T6464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.304037][ T6464] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  782.432382][ T5694] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  782.451294][ T5694] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  782.557524][T14204] usb 8-1: USB disconnect, device number 24
[  782.734691][T16655] netlink: 'syz.2.3031': attribute type 1 has an invalid length.
[  783.236838][T16661] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3033'.
[  783.505226][ T6464] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  783.671235][ T6464] usb 7-1: too many configurations: 36, using maximum allowed: 8
[  783.701649][ T6464] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  783.722181][ T6464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.741882][ T6464] usb 7-1: Product: syz
[  783.751981][ T6464] usb 7-1: Manufacturer: syz
[  783.772602][ T6464] usb 7-1: SerialNumber: syz
[  783.789944][ T6464] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  783.815590][ T6465] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  783.884998][ T6461] usb 9-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  783.917615][ T6461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.957522][ T6461] usb 9-1: config 0 descriptor??
[  783.970734][T16677] loop7: detected capacity change from 0 to 7
[  783.975471][ T6461] usb 9-1: can't set config #0, error -71
[  783.994758][ T6461] usb 9-1: USB disconnect, device number 24
[  784.092574][T16677] Dev loop7: unable to read RDB block 7
[  784.098583][T16677]  loop7: unable to read partition table
[  784.105294][T16677] loop7: partition table beyond EOD, truncated
[  784.112495][T16677] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰êjÌ–ã¢P=ý?ã}X‹º†LQkÝŠ5) failed (rc=-5)
[  784.206782][T16684] loop9: detected capacity change from 0 to 7
[  784.214909][T16684] Dev loop9: unable to read RDB block 7
[  784.221278][T16684]  loop9: AHDI p1 p2 p3
[  784.225709][T16684] loop9: partition table partially beyond EOD, truncated
[  784.233944][T16684] loop9: p1 start 1920169572 is beyond EOD, truncated
[  784.242185][T16684] loop9: p2 start 1851744889 is beyond EOD, truncated
[  784.538573][ T6461] usb 6-1: USB disconnect, device number 108
[  784.759146][T16703] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3045'.
[  784.867592][ T6465] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  784.896117][ T6465] ath9k_htc: Failed to initialize the device
[  784.910638][ T5694] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  784.959319][T16708] loop5: detected capacity change from 0 to 7
[  784.972938][T16708] Dev loop5: unable to read RDB block 7
[  784.990084][T16708]  loop5: AHDI p1 p2 p3 p4
[  784.995073][T16708] loop5: partition table partially beyond EOD, truncated
[  785.015035][T16708] loop5: p1 start 14067644 is beyond EOD, truncated
[  785.030286][T16708] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  785.091665][ T5694] usb 3-1: Using ep0 maxpacket: 32
[  785.114416][ T5694] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  785.146470][ T5694] usb 3-1: config 0 interface 0 has no altsetting 0
[  785.177597][ T5694] usb 3-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  785.200621][T16473] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  785.221506][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.332777][ T5694] usb 3-1: config 0 descriptor??
[  785.351118][T16695] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  785.403384][T16473] usb 6-1: Using ep0 maxpacket: 16
[  785.421426][T16712] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3049'.
[  785.427254][ T6465] usb 7-1: ath9k_htc: USB layer deinitialized
[  785.445455][T16473] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  785.468996][T16712] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3049'.
[  785.499095][T16473] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  785.521488][T14204] usb 7-1: USB disconnect, device number 35
[  785.564658][T16473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.603976][T16473] usb 6-1: Product: syz
[  785.617824][T16473] usb 6-1: Manufacturer: syz
[  785.633922][T16473] usb 6-1: SerialNumber: syz
[  785.659823][T16473] r8152-cfgselector 6-1: Unknown version 0x0000
[  785.673816][T16473] r8152-cfgselector 6-1: config 0 descriptor??
[  785.819560][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.858553][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.894852][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.924036][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.949121][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.971818][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  785.982408][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3050'.
[  785.999675][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  786.025409][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  786.055606][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  786.075370][ T5694] evision 0003:320F:5041.002D: unknown main item tag 0x0
[  786.098238][ T5694] evision 0003:320F:5041.002D: unexpected long global item
[  786.122193][ T5694] evision 0003:320F:5041.002D: probe with driver evision failed with error -22
[  786.138145][ T5694] usb 3-1: USB disconnect, device number 5
[  786.197379][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.227272][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.259408][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.269886][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.403505][T16722] x_tables: duplicate underflow at hook 1
[  786.411124][ T6459] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  786.587513][ T6459] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  786.626286][ T6459] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  786.649470][ T6459] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  786.666526][ T6459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  786.682953][ T6459] usb 9-1: SerialNumber: syz
[  787.089461][T16736] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3056'.
[  787.625336][T16746] loop5: detected capacity change from 0 to 7
[  787.642392][T16746] Dev loop5: unable to read RDB block 7
[  787.685071][T16746]  loop5: AHDI p1 p2 p3 p4
[  787.706741][T16746] loop5: partition table partially beyond EOD, truncated
[  787.738142][T16746] loop5: p1 start 14067644 is beyond EOD, truncated
[  787.770654][T16746] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  787.978732][ T6461] r8152-cfgselector 6-1: USB disconnect, device number 109
[  788.154312][T16752] ipvlan2: entered promiscuous mode
[  788.161902][T16752] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  788.177521][T16752] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  788.189572][T16752] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  788.302270][ T5694] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  788.362158][T16755] loop9: detected capacity change from 0 to 7
[  788.383861][T16755] Dev loop9: unable to read RDB block 7
[  788.389945][T16755]  loop9: AHDI p1 p2 p3
[  788.394756][T16755] loop9: partition table partially beyond EOD, truncated
[  788.404200][T16755] loop9: p1 start 1920169572 is beyond EOD, truncated
[  788.415581][T16755] loop9: p2 start 1851744889 is beyond EOD, truncated
[  788.460460][ T5694] usb 3-1: device descriptor read/64, error -71
[  788.664525][ T6461] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  788.720638][ T5694] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  788.805903][ T6459] usb 9-1: 0:2 : does not exist
[  788.821041][ T6461] usb 7-1: Using ep0 maxpacket: 16
[  788.840900][T14204] usb 8-1: new low-speed USB device number 25 using dummy_hcd
[  788.870444][ T6461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  788.881383][ T5694] usb 3-1: device descriptor read/64, error -71
[  788.899221][ T6461] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6
[  788.929526][ T6461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  788.942210][ T6459] usb 9-1: USB disconnect, device number 25
[  788.948350][T16763] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3067'.
[  788.959189][ T6461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  788.971532][ T6461] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  788.999601][ T6461] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  789.009765][ T5694] usb usb3-port1: attempt power cycle
[  789.034591][ T6461] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  789.052489][T14204] usb 8-1: unable to get BOS descriptor set
[  789.073303][ T6461] usb 7-1: Manufacturer: syz
[  789.080251][T14204] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  789.098485][ T6461] usb 7-1: config 0 descriptor??
[  789.110749][T14204] usb 8-1: config 1 interface 0 has no altsetting 0
[  789.131381][T14204] usb 8-1: string descriptor 0 read error: -22
[  789.138235][T14204] usb 8-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  789.154725][T14204] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.179955][T16761] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  789.360985][ T6465] usb 7-1: USB disconnect, device number 36
[  789.370573][ T5694] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  789.386545][T16772] tipc: Started in network mode
[  789.392022][T16473] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  789.404229][T16772] tipc: Node identity ac14140f, cluster identity 4711
[  789.422526][ T5694] usb 3-1: device descriptor read/8, error -71
[  789.430989][T16772] tipc: New replicast peer: 255.255.255.255
[  789.445446][T16772] tipc: Enabled bearer <udp:syz2>, priority 10
[  789.478941][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  789.478983][   T30] audit: type=1326 audit(1778863062.228:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.557584][   T30] audit: type=1326 audit(1778863062.288:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.614076][   T30] audit: type=1326 audit(1778863062.298:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.680818][   T30] audit: type=1326 audit(1778863062.298:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.683828][T16473] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  789.705953][ T5694] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  789.774445][ T5694] usb 3-1: device descriptor read/8, error -71
[  789.813781][   T30] audit: type=1326 audit(1778863062.408:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.822926][T16473] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.891302][ T5694] usb usb3-port1: unable to enumerate USB device
[  789.906339][T16473] usb 9-1: config 0 descriptor??
[  789.907690][   T30] audit: type=1326 audit(1778863062.438:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  789.977442][   T30] audit: type=1326 audit(1778863062.438:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  790.038140][   T30] audit: type=1326 audit(1778863062.478:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  790.072581][T16473] rndis_host 9-1:0.0: GUID doesn't match
[  790.163086][T14204] usbhid 8-1:1.0: can't add hid device: -71
[  790.189878][T14204] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  790.236191][T16776] loop5: detected capacity change from 0 to 7
[  790.246672][T14204] usb 8-1: USB disconnect, device number 25
[  790.266302][T16776] Dev loop5: unable to read RDB block 7
[  790.292346][T16776]  loop5: unable to read partition table
[  790.322916][T16776] loop5: partition table beyond EOD, truncated
[  790.356299][   T30] audit: type=1326 audit(1778863062.728:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16769 comm="syz.5.3070" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8af9ce59 code=0x7ffc0000
[  790.424912][ T6459] usb 9-1: USB disconnect, device number 26
[  790.439694][T16776] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  790.560198][T16473] tipc: Node number set to 2886997007
[  791.412922][ T6459] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  791.434143][T14204] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  791.526090][T16808] loop5: detected capacity change from 0 to 7
[  791.534053][T16808] Dev loop5: unable to read RDB block 7
[  791.543325][T16808]  loop5: unable to read partition table
[  791.555261][T16808] loop5: partition table beyond EOD, truncated
[  791.569393][T16808] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  791.581234][ T6459] usb 7-1: Using ep0 maxpacket: 16
[  791.595740][ T6459] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  791.614754][T14204] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  791.635101][ T6459] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  791.659177][T14204] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  791.679847][T14204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.693650][ T6459] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  791.714778][T14204] usb 3-1: Product: syz
[  791.719079][ T6459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.733463][T14204] usb 3-1: Manufacturer: syz
[  791.746391][ T6459] usb 7-1: Product: syz
[  791.756952][T14204] usb 3-1: SerialNumber: syz
[  791.767036][ T6459] usb 7-1: Manufacturer: syz
[  791.785661][T14204] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  791.798039][ T6459] usb 7-1: SerialNumber: syz
[  791.829151][ T6459] usb 7-1: 0:2 : does not exist
[  792.028229][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3076'.
[  792.071303][T16797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  792.109444][T16797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  792.158637][T16797] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3076'.
[  792.205401][T14204] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  792.259546][ T6459] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  792.292500][T14204] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  792.333952][T14204] usb 3-1: media controller created
[  792.437583][T14204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  792.468787][ T6459] usb 7-1: USB disconnect, device number 37
[  792.785792][T14204] usb 3-1: USB disconnect, device number 10
[  792.855384][T16833] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3087'.
[  792.921702][T16830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3087'.
[  792.932188][T16832] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:1098x16 (0x38415262, 8, 0, 0, 0)
[  793.386886][T16850] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  793.396249][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3089'.
[  793.490827][ T6466] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  793.683901][ T6466] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  793.744113][ T6466] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  793.829529][ T6466] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  793.872892][ T6466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.914024][ T6466] usb 9-1: Product: syz
[  793.936560][ T6466] usb 9-1: Manufacturer: syz
[  793.959953][ T6466] usb 9-1: SerialNumber: syz
[  794.234842][T16846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  794.278053][T16846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  794.327969][ T6466] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22
[  794.366731][ T6466] usb 9-1: USB disconnect, device number 27
[  794.823841][ T6466] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  794.868201][T16865] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  794.951666][T16867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3096'.
[  794.983510][ T6466] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  795.005949][T16867] bond1: option miimon: invalid value (18446744071578845313)
[  795.018802][ T6466] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  795.027194][T16867] bond1: option miimon: allowed values 0 - 2147483647
[  795.056914][ T6466] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  795.073674][ T6466] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.092895][ T6466] usb 9-1: Product: syz
[  795.104218][ T6466] usb 9-1: Manufacturer: syz
[  795.114218][T16867] bond1 (unregistering): Released all slaves
[  795.120642][ T6466] usb 9-1: SerialNumber: syz
[  795.355533][ T6466] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22
[  795.369571][ T6466] usb 9-1: USB disconnect, device number 28
[  795.720987][T16875] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3098'.
[  795.951009][T16885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3101'.
[  795.970500][ T5694] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  796.010518][T16885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3101'.
[  796.166236][ T5694] usb 7-1: Using ep0 maxpacket: 16
[  796.179726][ T5694] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[  796.208618][ T5694] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  796.224286][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.252138][ T5694] usb 7-1: Product: syz
[  796.264502][ T5694] usb 7-1: Manufacturer: syz
[  796.275978][ T5694] usb 7-1: SerialNumber: syz
[  796.306343][ T5694] r8152-cfgselector 7-1: Unknown version 0x0000
[  796.322488][ T5694] r8152-cfgselector 7-1: config 0 descriptor??
[  796.773788][ T6466] r8152-cfgselector 7-1: USB disconnect, device number 38
[  796.892253][T16905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.920755][T16905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  797.030744][T16473] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  797.180965][ T6464] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[  797.195329][T16473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  797.209574][T16473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  797.221897][T16473] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  797.232370][T16473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.246275][T16473] usb 6-1: config 0 descriptor??
[  797.330141][ T6464] usb 8-1: device descriptor read/64, error -71
[  797.582383][ T6464] usb 8-1: new full-speed USB device number 27 using dummy_hcd
[  797.720621][ T6464] usb 8-1: device descriptor read/64, error -71
[  797.842410][ T6464] usb usb8-port1: attempt power cycle
[  798.055128][T16917] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3)
[  798.061709][T16917] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  798.083311][T16917] vhci_hcd vhci_hcd.0: Device attached
[  798.102944][T16918] vhci_hcd: connection closed
[  798.109673][ T1180] vhci_hcd vhci_hcd.8: stop threads
[  798.139617][ T1180] vhci_hcd vhci_hcd.8: release socket
[  798.164229][ T1180] vhci_hcd vhci_hcd.8: disconnect device
[  798.191649][ T6464] usb 8-1: new full-speed USB device number 28 using dummy_hcd
[  798.223237][ T6464] usb 8-1: device descriptor read/8, error -71
[  798.470676][ T6464] usb 8-1: new full-speed USB device number 29 using dummy_hcd
[  798.499117][ T6464] usb 8-1: device descriptor read/8, error -71
[  798.634731][ T6464] usb usb8-port1: unable to enumerate USB device
[  798.721601][T16473] usbhid 6-1:0.0: can't add hid device: -71
[  798.748207][T16473] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  798.777052][T16473] usb 6-1: USB disconnect, device number 110
[  798.834562][T16928] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.085558][T16944] loop2: detected capacity change from 0 to 7
[  799.094347][T16944] Dev loop2: unable to read RDB block 7
[  799.106399][T16944]  loop2: unable to read partition table
[  799.113344][T16944] loop2: partition table beyond EOD, truncated
[  799.119853][T16944] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  799.310602][ T5694] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  799.480635][ T5694] usb 6-1: Using ep0 maxpacket: 8
[  799.493636][ T5694] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  799.513883][ T5694] usb 6-1: config 250 has an invalid interface number: 228 but max is -1
[  799.543144][ T5694] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0
[  799.566575][ T5694] usb 6-1: config 250 has no interface number 0
[  799.579919][ T5694] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  799.613868][ T5694] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  799.637056][ T5694] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  799.661834][ T5694] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  799.678921][ T5694] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  799.713174][ T5694] usb 6-1: config 250 interface 228 has no altsetting 0
[  799.737143][ T5694] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  799.758068][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  799.782868][ T5694] usb 6-1: Product: syz
[  799.793163][ T5694] usb 6-1: SerialNumber: syz
[  799.818530][ T5694] hub 6-1:250.228: bad descriptor, ignoring hub
[  799.838952][ T5694] hub 6-1:250.228: probe with driver hub failed with error -5
[  800.025162][T16942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.035372][T16942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.162910][ T5694] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 111 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  800.201716][ T5694] usb 6-1: USB disconnect, device number 111
[  800.216084][ T5694] usblp0: removed
[  800.230544][ T6464] usb 7-1: new low-speed USB device number 39 using dummy_hcd
[  800.420620][ T6464] usb 7-1: Invalid ep0 maxpacket: 32
[  800.569619][ T6464] usb 7-1: new low-speed USB device number 40 using dummy_hcd
[  800.733150][ T6464] usb 7-1: Invalid ep0 maxpacket: 32
[  800.755163][ T6464] usb usb7-port1: attempt power cycle
[  800.910501][ T5694] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  801.073512][T16473] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  801.093964][ T5694] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  801.145427][ T5694] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  801.158456][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  801.167561][ T5694] usb 9-1: Product: syz
[  801.172164][ T5694] usb 9-1: Manufacturer: syz
[  801.172442][ T6464] usb 7-1: new low-speed USB device number 41 using dummy_hcd
[  801.177001][ T5694] usb 9-1: SerialNumber: syz
[  801.230555][T16473] usb 6-1: Using ep0 maxpacket: 32
[  801.239394][ T6464] usb 7-1: Invalid ep0 maxpacket: 32
[  801.249778][T16473] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  801.285298][T16473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.320628][ T6465] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  801.331126][T16473] usb 6-1: config 0 descriptor??
[  801.371232][T16473] gspca_main: sunplus-2.14.0 probing 041e:400b
[  801.390640][ T6464] usb 7-1: new low-speed USB device number 42 using dummy_hcd
[  801.421651][ T6464] usb 7-1: Invalid ep0 maxpacket: 32
[  801.436307][ T5694] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  801.456409][ T6464] usb usb7-port1: unable to enumerate USB device
[  801.500591][ T6465] usb 8-1: Using ep0 maxpacket: 16
[  801.516980][ T6465] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  801.530590][ T6465] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  801.549108][ T6465] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  801.572971][ T6465] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  801.587610][ T6465] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  801.606731][ T6465] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  801.674125][ T6465] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  801.694949][ T6465] usb 8-1: Manufacturer: syz
[  801.709409][ T6465] usb 8-1: config 0 descriptor??
[  801.717495][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.743790][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.772864][ T6464] usb 9-1: USB disconnect, device number 29
[  801.785583][ T6464] usblp0: removed
[  802.020862][ T6465] rc_core: IR keymap rc-hauppauge not found
[  802.029141][ T6465] Registered IR keymap rc-empty
[  802.036568][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.061375][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.082393][ T6465] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  802.113586][ T6465] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input66
[  802.148249][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.171085][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.210815][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.251063][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.281912][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.310751][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.361566][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.391223][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.430633][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.460786][ T6465] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  802.483288][ T6465] mceusb 8-1:0.0: Registered Ā with mce emulator interface version 1
[  802.498493][ T6465] mceusb 8-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  802.554632][ T6465] usb 8-1: USB disconnect, device number 30
[  803.399212][T16989] loop5: detected capacity change from 0 to 7
[  803.407555][T16989] Dev loop5: unable to read RDB block 7
[  803.415252][T16989]  loop5: AHDI p1 p2 p3 p4
[  803.420888][T16989] loop5: partition table partially beyond EOD, truncated
[  803.428630][T16989] loop5: p1 start 14067644 is beyond EOD, truncated
[  803.441395][T16989] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  803.502843][T16473] gspca_sunplus: reg_w_riv err -110
[  803.512339][T16473] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[  803.521612][ T6465] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  803.534649][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3131'.
[  803.696654][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'.
[  803.706581][ T6465] usb 9-1: Using ep0 maxpacket: 32
[  803.715920][ T6465] usb 9-1: unable to get BOS descriptor or descriptor too short
[  803.730665][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3134'.
[  803.758262][ T6465] usb 9-1: config 7 has an invalid interface number: 187 but max is 0
[  803.783258][ T6465] usb 9-1: config 7 has no interface number 0
[  803.808660][ T6465] usb 9-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  803.823832][ T6464] usb 6-1: USB disconnect, device number 112
[  803.848596][ T6465] usb 9-1: config 7 interface 187 has no altsetting 0
[  803.869725][ T6465] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  803.882731][ T6465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.899149][ T6465] usb 9-1: Product: syz
[  803.908716][ T6465] usb 9-1: Manufacturer: syz
[  803.926278][ T6465] usb 9-1: SerialNumber: syz
[  804.180764][T16473] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  804.256827][ T6465] usb 9-1: Unknown endpoint type found, address 0x07
[  804.273118][ T6465] usb 9-1: Unknown endpoint type found, address 0x03
[  804.306221][ T6465] usb 9-1: Not enough endpoints found in device, aborting!
[  804.372828][T16473] usb 3-1: config index 0 descriptor too short (expected 8228, got 36)
[  804.385362][T16983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.402347][T16473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  804.462354][T16983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.465752][T16473] usb 3-1: config 0 has no interfaces?
[  804.505977][T16473] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  804.544537][T16473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.565290][T16983] input: syz1 as /devices/virtual/input/input67
[  804.577500][T16473] usb 3-1: config 0 descriptor??
[  805.449748][T17033] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  805.917316][T17036] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.925284][T17036] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.277401][T17038] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3142'.
[  806.654935][T16473] usb 9-1: USB disconnect, device number 30
[  806.720684][ T5694] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  806.776196][T17042] loop5: detected capacity change from 0 to 7
[  806.796652][T17042]  loop5: [POWERTEC] p1
[  806.814754][T17042] loop5: p1 start 29360128 is beyond EOD, truncated
[  806.862672][T17036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  806.891629][ T5694] usb 8-1: Using ep0 maxpacket: 32
[  806.938045][ T5694] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  806.949401][T17036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  806.973995][ T5694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.002763][ T5694] usb 8-1: Product: syz
[  807.020701][ T5694] usb 8-1: Manufacturer: syz
[  807.050945][ T5694] usb 8-1: SerialNumber: syz
[  807.081415][ T5694] usb 8-1: config 0 descriptor??
[  807.123138][ T5694] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  807.425691][T17051] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  807.477692][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3146'.
[  807.494422][T16268] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.514682][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3146'.
[  807.522932][T16268] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.554706][T16268] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  807.570266][ T6459] usb 3-1: USB disconnect, device number 11
[  807.577560][T16268] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  808.020603][ T6459] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  808.162052][ T6459] usb 3-1: device descriptor read/64, error -71
[  808.410414][ T6459] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  808.468330][T17090] loop5: detected capacity change from 0 to 7
[  808.479255][T17090]  loop5: [POWERTEC] p1
[  808.484423][T17090] loop5: p1 start 29360128 is beyond EOD, truncated
[  808.550959][ T6459] usb 3-1: device descriptor read/64, error -71
[  808.572067][T17092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3155'.
[  808.671411][ T6459] usb usb3-port1: attempt power cycle
[  808.677001][ T6458] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  808.804792][T17094] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3156'.
[  808.843609][ T6458] usb 9-1: Using ep0 maxpacket: 16
[  808.867768][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  808.874556][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  808.889043][ T6458] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  808.909003][ T6458] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  808.921548][ T6458] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  808.940386][ T6458] usb 9-1: config 0 interface 0 has no altsetting 0
[  808.947354][ T6458] usb 9-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00
[  808.960294][ T6458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.991413][ T6458] usb 9-1: config 0 descriptor??
[  809.032085][ T6459] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  809.043379][T17101] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3158'.
[  809.082167][ T6459] usb 3-1: device descriptor read/8, error -71
[  809.222121][ T5694] gspca_ov534_9: reg_w failed -110
[  809.282941][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.310733][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.341484][ T6459] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  809.382842][ T6459] usb 3-1: device descriptor read/8, error -71
[  809.479912][ T6465] hid_parser_main: 48 callbacks suppressed
[  809.479929][ T6465] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0
[  809.500750][ T5694] gspca_ov534_9: Unknown sensor 0000
[  809.500849][ T5694] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22
[  809.514670][ T6459] usb usb3-port1: unable to enumerate USB device
[  809.587428][ T6465] hid-generic 0000:0000:0000.002E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  809.609834][T17120] loop5: detected capacity change from 0 to 7
[  809.617794][T17120] Dev loop5: unable to read RDB block 7
[  809.624065][T17120]  loop5: AHDI p1 p2 p3 p4
[  809.628925][T17120] loop5: partition table partially beyond EOD, truncated
[  809.642235][T17120] loop5: p1 start 14067644 is beyond EOD, truncated
[  809.649006][T17120] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  809.976041][T17127] netlink: 'syz.5.3163': attribute type 16 has an invalid length.
[  809.998457][ T5694] usb 8-1: USB disconnect, device number 31
[  810.016431][T17124] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.066048][T17127] netlink: 'syz.5.3163': attribute type 17 has an invalid length.
[  810.067803][T17124] bridge0: port 2(bridge_slave_1) entered disabled state
[  810.370566][ T6465] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  810.383363][T17127] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.390672][T17127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.402484][ T5694] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  810.436848][T17127] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.444118][T17127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.563994][ T6465] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  810.585802][ T5694] usb 8-1: Using ep0 maxpacket: 16
[  810.600253][ T6465] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  810.615181][ T5694] usb 8-1: unable to get BOS descriptor or descriptor too short
[  810.654572][ T5694] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  810.690333][ T5694] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  810.712911][ T6465] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  810.752893][ T5694] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  810.797649][ T6465] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  810.811909][ T5694] usb 8-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30
[  810.835387][ T6465] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  810.846944][ T5694] usb 8-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  810.858263][ T6465] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  810.858288][ T6465] usb 6-1: Product: syz
[  810.858301][ T6465] usb 6-1: Manufacturer: syz
[  810.953703][ T5694] usb 8-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235
[  810.954615][ T6465] cdc_wdm 6-1:1.0: skipping garbage
[  811.017238][ T6465] cdc_wdm 6-1:1.0: skipping garbage
[  811.034815][ T5694] usb 8-1: config 1 interface 1 has no altsetting 1
[  811.046868][ T6465] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  811.093329][ T5694] usb 8-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  811.116502][ T5694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.168265][ T5694] usb 8-1: Product: syz
[  811.192704][ T5694] usb 8-1: Manufacturer: syz
[  811.223016][ T5694] usb 8-1: SerialNumber: syz
[  811.489818][ T5694] usb 8-1: 1:151 : invalid UAC_AS_GENERAL desc
[  811.567999][ T5694] usb 8-1: 0:2 : does not exist
[  811.601194][ T6458] usb 9-1: string descriptor 0 read error: -71
[  811.687426][ T6458] usbhid 9-1:0.0: can't add hid device: -71
[  811.719560][ T6458] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  811.761928][ T6458] usb 9-1: USB disconnect, device number 31
[  811.773673][ T5694] usb 8-1: USB disconnect, device number 32
[  811.867513][T17145] loop5: detected capacity change from 0 to 7
[  811.897711][T17145] Dev loop5: unable to read RDB block 7
[  811.917406][T17145]  loop5: unable to read partition table
[  811.933714][T17145] loop5: partition table beyond EOD, truncated
[  811.950970][T17145] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  812.319394][T17155] netlink: 'syz.2.3172': attribute type 1 has an invalid length.
[  812.329250][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3172'.
[  812.361871][ T5694] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  812.542568][ T5694] usb 8-1: unable to get BOS descriptor or descriptor too short
[  812.564271][ T5694] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  812.582162][ T5694] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  812.603472][T17163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3173'.
[  812.614223][ T5694] usb 8-1: config 1 interface 0 has no altsetting 1
[  812.621793][T17163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3173'.
[  812.636521][ T5694] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  812.674675][ T5694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.708928][ T5694] usb 8-1: Product: syz
[  812.725840][ T5694] usb 8-1: Manufacturer: syz
[  812.736670][ T5694] usb 8-1: SerialNumber: syz
[  812.774158][ T5694] smsusb:smsusb_probe: board id=8, interface number 0
[  812.955039][T17165] team0: entered promiscuous mode
[  812.966605][T17165] team_slave_0: entered promiscuous mode
[  812.980399][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.989151][T17165] team_slave_1: entered promiscuous mode
[  812.998781][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.007261][T17165] veth0_to_hsr: entered promiscuous mode
[  813.037920][T17165] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  813.253314][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.293233][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.306203][ T5694] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  813.321815][ T5694] smsusb 8-1:1.0: probe with driver smsusb failed with error -71
[  813.372482][ T5694] usb 8-1: USB disconnect, device number 33
[  813.562640][T17181] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3174'.
[  813.692267][ T5694] usb 8-1: new low-speed USB device number 34 using dummy_hcd
[  813.856033][ T6465] usb 6-1: USB disconnect, device number 113
[  813.870354][ T6461] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  813.878755][ T5694] usb 8-1: Invalid ep0 maxpacket: 64
[  813.927588][T17185] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3180'.
[  813.963527][T17187] netlink: 'syz.2.3179': attribute type 13 has an invalid length.
[  814.021708][ T5694] usb 8-1: new low-speed USB device number 35 using dummy_hcd
[  814.050726][ T6461] usb 9-1: Using ep0 maxpacket: 16
[  814.065780][ T6461] usb 9-1: config 9 has an invalid interface number: 133 but max is 1
[  814.073461][T17189] loop1: detected capacity change from 0 to 7
[  814.083229][T17189] Dev loop1: unable to read RDB block 7
[  814.088925][T17189]  loop1: unable to read partition table
[  814.097023][T17189] loop1: partition table beyond EOD, truncated
[  814.098661][ T6461] usb 9-1: config 9 has an invalid interface number: 245 but max is 1
[  814.104380][T17189] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  814.132946][ T6461] usb 9-1: config 9 has no interface number 0
[  814.149646][ T6461] usb 9-1: config 9 has no interface number 1
[  814.173289][ T6461] usb 9-1: config 9 interface 133 has no altsetting 0
[  814.198628][ T6461] usb 9-1: config 9 interface 245 has no altsetting 0
[  814.213040][ T5694] usb 8-1: Invalid ep0 maxpacket: 64
[  814.218588][ T6461] usb 9-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d
[  814.248654][ T5694] usb usb8-port1: attempt power cycle
[  814.258146][ T6461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.274182][ T6461] usb 9-1: Product: syz
[  814.281069][ T6461] usb 9-1: Manufacturer: syz
[  814.284277][T17195] loop2: detected capacity change from 0 to 7
[  814.285721][ T6461] usb 9-1: SerialNumber: syz
[  814.304178][T17195] Dev loop2: unable to read RDB block 7
[  814.320826][T17195]  loop2: unable to read partition table
[  814.331105][T17195] loop2: partition table beyond EOD, truncated
[  814.345527][T17195] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  814.520724][ T6465] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  814.620889][ T5694] usb 8-1: new low-speed USB device number 36 using dummy_hcd
[  814.693951][ T6465] usb 7-1: Using ep0 maxpacket: 16
[  814.736172][ T6465] usb 7-1: too many configurations: 22, using maximum allowed: 8
[  814.756720][ T5694] usb 8-1: Invalid ep0 maxpacket: 64
[  814.771695][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  814.783402][ T6466] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  814.799423][ T6465] usb 7-1: config 0 has no interface number 0
[  814.828192][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  814.858864][ T6465] usb 7-1: config 0 has no interface number 0
[  814.906138][ T5694] usb 8-1: new low-speed USB device number 37 using dummy_hcd
[  814.959373][ T5694] usb 8-1: Invalid ep0 maxpacket: 64
[  814.971161][ T5694] usb usb8-port1: unable to enumerate USB device
[  815.154308][ T5694] usb 8-1: new low-speed USB device number 38 using dummy_hcd
[  815.155108][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  815.594812][ T6466] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  815.743161][ T6465] usb 7-1: config 0 has no interface number 0
[  815.847719][ T6466] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  815.887482][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  815.916763][ T6465] usb 7-1: config 0 has no interface number 0
[  816.164313][ T6466] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  816.181697][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  816.249064][ T6466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.258059][ T6465] usb 7-1: config 0 has no interface number 0
[  816.277831][ T6466] usb 3-1: Product: syz
[  816.279167][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  816.294737][ T6466] usb 3-1: Manufacturer: syz
[  816.306453][ T6466] usb 3-1: SerialNumber: syz
[  816.319507][ T6465] usb 7-1: config 0 has no interface number 0
[  816.330837][ T6466] usb 3-1: config 0 descriptor??
[  816.348383][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  816.364142][ T6465] usb 7-1: config 0 has no interface number 0
[  816.382032][ T6465] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  816.396846][ T6465] usb 7-1: config 0 has no interface number 0
[  816.424144][ T6465] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  816.450767][ T6465] usb 7-1: New USB device strings: Mfr=127, Product=6, SerialNumber=36
[  816.480639][ T6465] usb 7-1: Product: syz
[  816.495524][ T6465] usb 7-1: Manufacturer: syz
[  816.506767][ T6465] usb 7-1: SerialNumber: syz
[  816.529235][ T6465] usb 7-1: config 0 descriptor??
[  816.558845][ T6465] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  816.625016][ T6466] gspca_main: sunplus-2.14.0 probing 055f:c630
[  816.731426][ T6461] videodev: could not get a free minor
[  816.754839][ T6461] dsbr100 9-1:9.245: couldn't register video device
[  816.782173][ T6461] dsbr100 9-1:9.245: probe with driver dsbr100 failed with error -23
[  816.838250][ T6461] usb 9-1: USB disconnect, device number 32
[  816.940983][T17219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  817.011957][T17221] program syz.8.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  817.160834][ T6466] gspca_sunplus: reg_r err -110
[  817.195078][ T6466] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  817.288247][T17223] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:1098x16 (0x38415262, 8, 0, 0, 0)
[  817.500973][ T6461] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  817.557034][ T6465] gspca_spca1528: reg_w err -71
[  817.585665][ T6465] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  817.689571][ T6461] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  817.706831][ T6465] usb 7-1: USB disconnect, device number 43
[  817.736577][ T6461] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  817.781817][ T6461] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  817.831012][ T6461] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1160, setting to 1024
[  817.876285][ T6461] usb 9-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  817.911714][ T6461] usb 9-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  817.958472][ T6461] usb 9-1: Manufacturer: syz
[  818.003940][ T6461] usb 9-1: config 0 descriptor??
[  818.042930][ T6461] smsusb:smsusb_probe: board id=9, interface number 0
[  818.106587][ T6461] smsusb:siano_media_device_register: media controller created
[  818.238604][ T6461] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[  818.266188][ T6461] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[  818.323268][ T6461] ------------[ cut here ]------------
[  818.328803][ T6461] !PageLargeKmalloc(page)
[  818.328821][ T6461] WARNING: mm/slub.c:6475 at free_large_kmalloc+0x9b/0x110, CPU#0: kworker/0:14/6461
[  818.343963][ T6461] Modules linked in:
[  818.348592][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: kworker/0:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.359869][ T6461] Tainted: [L]=SOFTLOCKUP
[  818.364455][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  818.374789][ T6461] Workqueue: usb_hub_wq hub_event
[  818.379860][ T6461] RIP: 0010:free_large_kmalloc+0x9b/0x110
[  818.385790][ T6461] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 2e 58 fc 8d 5b 41 5e 5d e9 0f 4c 02 ff
[  818.405610][ T6461] RSP: 0018:ffffc9000c98eb20 EFLAGS: 00010206
[  818.411915][ T6461] RAX: 00000000ff000000 RBX: ffffea0002301880 RCX: 0000000000000001
[  818.419881][ T6461] RDX: ffffc9001af27000 RSI: ffff88808c062000 RDI: ffffea0002301880
[  818.428057][ T6461] RBP: 0000000000000000 R08: ffff8880314c7a03 R09: 1ffff11006298f40
[  818.436114][ T6461] R10: dffffc0000000000 R11: ffffed1006298f41 R12: 1ffff110023d1282
[  818.444998][ T6461] R13: 0000000000000000 R14: ffff8880314c7a60 R15: dffffc0000000000
[  818.453391][ T6461] FS:  0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000
[  818.462703][ T6461] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  818.469325][ T6461] CR2: 00007f4007d63e9c CR3: 00000000768f6000 CR4: 00000000003526f0
[  818.477427][ T6461] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[  818.485564][ T6461] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  818.493568][ T6461] Call Trace:
[  818.496848][ T6461]  <TASK>
[  818.499781][ T6461]  usb_free_urb+0xd0/0x120
[  818.504376][ T6461]  smsusb_term_device+0x1d7/0x3e0
[  818.509405][ T6461]  smsusb_probe+0x1aba/0x2280
[  818.514134][ T6461]  ? __pfx_smsusb_probe+0x10/0x10
[  818.519202][ T6461]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  818.524937][ T6461]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  818.530797][ T6461]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  818.536537][ T6461]  usb_probe_interface+0x659/0xc70
[  818.542407][ T6461]  ? __pfx_usb_probe_interface+0x10/0x10
[  818.548055][ T6461]  really_probe+0x267/0xaf0
[  818.552940][ T6461]  __driver_probe_device+0x1ef/0x380
[  818.558238][ T6461]  driver_probe_device+0x4f/0x240
[  818.563453][ T6461]  __device_attach_driver+0x279/0x430
[  818.568863][ T6461]  bus_for_each_drv+0x258/0x2f0
[  818.573755][ T6461]  ? __pfx___device_attach_driver+0x10/0x10
[  818.579654][ T6461]  ? __pfx_bus_for_each_drv+0x10/0x10
[  818.585190][ T6461]  ? lockdep_hardirqs_on+0x7a/0x110
[  818.590444][ T6461]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  818.596541][ T6461]  __device_attach+0x2c5/0x450
[  818.601504][ T6461]  ? __pfx___device_attach+0x10/0x10
[  818.606810][ T6461]  ? _raw_spin_unlock+0x28/0x50
[  818.611725][ T6461]  device_initial_probe+0xa1/0xd0
[  818.616754][ T6461]  bus_probe_device+0x12a/0x220
[  818.622159][ T6461]  device_add+0x7e9/0xbb0
[  818.626574][ T6461]  usb_set_configuration+0x1a87/0x2110
[  818.632201][ T6461]  usb_generic_driver_probe+0x8d/0x150
[  818.637670][ T6461]  usb_probe_device+0x1c4/0x3b0
[  818.643220][ T6461]  ? __pfx_usb_probe_device+0x10/0x10
[  818.648605][ T6461]  really_probe+0x267/0xaf0
[  818.653513][ T6461]  __driver_probe_device+0x1ef/0x380
[  818.658851][ T6461]  driver_probe_device+0x4f/0x240
[  818.664178][ T6461]  __device_attach_driver+0x279/0x430
[  818.669760][ T6461]  bus_for_each_drv+0x258/0x2f0
[  818.674695][ T6461]  ? __pfx___device_attach_driver+0x10/0x10
[  818.680765][ T6461]  ? __pfx_bus_for_each_drv+0x10/0x10
[  818.686153][ T6461]  ? lockdep_hardirqs_on+0x7a/0x110
[  818.691409][ T6461]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  818.697254][ T6461]  __device_attach+0x2c5/0x450
[  818.702324][ T6461]  ? __pfx___device_attach+0x10/0x10
[  818.707638][ T6461]  ? _raw_spin_unlock+0x28/0x50
[  818.712625][ T6461]  device_initial_probe+0xa1/0xd0
[  818.717648][ T6461]  bus_probe_device+0x12a/0x220
[  818.722656][ T6461]  device_add+0x7e9/0xbb0
[  818.726985][ T6461]  usb_new_device+0xa08/0x16f0
[  818.731795][ T6461]  ? __pfx_usb_new_device+0x10/0x10
[  818.737011][ T6461]  ? _raw_spin_unlock_irq+0x23/0x50
[  818.742388][ T6461]  hub_event+0x2a1c/0x4f30
[  818.747310][ T6461]  ? do_raw_spin_unlock+0xf5/0x210
[  818.752770][ T6461]  ? __pfx_hub_event+0x10/0x10
[  818.757532][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  818.763634][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  818.769358][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  818.775110][ T6461]  process_scheduled_works+0xb5d/0x1860
[  818.781316][ T6461]  ? __pfx_process_scheduled_works+0x10/0x10
[  818.787393][ T6461]  ? assign_work+0x3d5/0x5e0
[  818.792138][ T6461]  worker_thread+0xa53/0xfc0
[  818.796786][ T6461]  kthread+0x389/0x470
[  818.801035][ T6461]  ? __pfx_worker_thread+0x10/0x10
[  818.806143][ T6461]  ? __pfx_kthread+0x10/0x10
[  818.810767][ T6461]  ret_from_fork+0x514/0xb70
[  818.815360][ T6461]  ? __pfx_ret_from_fork+0x10/0x10
[  818.820676][ T6461]  ? __switch_to+0xc79/0x1410
[  818.825375][ T6461]  ? __pfx_kthread+0x10/0x10
[  818.830023][ T6461]  ret_from_fork_asm+0x1a/0x30
[  818.834812][ T6461]  </TASK>
[  818.837946][ T6461] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  818.845217][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: kworker/0:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  818.856230][ T6461] Tainted: [L]=SOFTLOCKUP
[  818.860541][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  818.870590][ T6461] Workqueue: usb_hub_wq hub_event
[  818.875642][ T6461] Call Trace:
[  818.878914][ T6461]  <TASK>
[  818.881860][ T6461]  vpanic+0x56c/0xa60
[  818.885841][ T6461]  ? __pfx__printk+0x10/0x10
[  818.890425][ T6461]  ? __pfx_vpanic+0x10/0x10
[  818.894945][ T6461]  ? is_bpf_text_address+0x292/0x2b0
[  818.900222][ T6461]  ? is_bpf_text_address+0x26/0x2b0
[  818.905439][ T6461]  panic+0xc5/0xd0
[  818.909149][ T6461]  ? __pfx_panic+0x10/0x10
[  818.913592][ T6461]  ? ret_from_fork_asm+0x1a/0x30
[  818.918542][ T6461]  __warn+0x315/0x4c0
[  818.922536][ T6461]  ? free_large_kmalloc+0x9b/0x110
[  818.927679][ T6461]  ? free_large_kmalloc+0x9b/0x110
[  818.932786][ T6461]  __report_bug+0x29a/0x540
[  818.937307][ T6461]  ? device_initial_probe+0xa1/0xd0
[  818.942491][ T6461]  ? bus_probe_device+0x12a/0x220
[  818.947504][ T6461]  ? device_add+0x7e9/0xbb0
[  818.951998][ T6461]  ? free_large_kmalloc+0x9b/0x110
[  818.957104][ T6461]  ? __pfx___report_bug+0x10/0x10
[  818.962143][ T6461]  ? usb_new_device+0xa08/0x16f0
[  818.967070][ T6461]  ? hub_event+0x2a1c/0x4f30
[  818.971649][ T6461]  ? process_scheduled_works+0xb5d/0x1860
[  818.977378][ T6461]  ? smscore_unregister_device+0x651/0x780
[  818.983190][ T6461]  ? free_large_kmalloc+0x9b/0x110
[  818.988294][ T6461]  report_bug+0x16a/0x220
[  818.992617][ T6461]  ? free_large_kmalloc+0x9b/0x110
[  818.997719][ T6461]  ? free_large_kmalloc+0x9d/0x110
[  819.003350][ T6461]  handle_bug+0x9c/0x200
[  819.007595][ T6461]  exc_invalid_op+0x1a/0x50
[  819.012201][ T6461]  asm_exc_invalid_op+0x1a/0x20
[  819.017360][ T6461] RIP: 0010:free_large_kmalloc+0x9b/0x110
[  819.023110][ T6461] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 2e 58 fc 8d 5b 41 5e 5d e9 0f 4c 02 ff
[  819.042731][ T6461] RSP: 0018:ffffc9000c98eb20 EFLAGS: 00010206
[  819.048818][ T6461] RAX: 00000000ff000000 RBX: ffffea0002301880 RCX: 0000000000000001
[  819.056784][ T6461] RDX: ffffc9001af27000 RSI: ffff88808c062000 RDI: ffffea0002301880
[  819.064973][ T6461] RBP: 0000000000000000 R08: ffff8880314c7a03 R09: 1ffff11006298f40
[  819.073149][ T6461] R10: dffffc0000000000 R11: ffffed1006298f41 R12: 1ffff110023d1282
[  819.081132][ T6461] R13: 0000000000000000 R14: ffff8880314c7a60 R15: dffffc0000000000
[  819.089206][ T6461]  usb_free_urb+0xd0/0x120
[  819.093733][ T6461]  smsusb_term_device+0x1d7/0x3e0
[  819.098962][ T6461]  smsusb_probe+0x1aba/0x2280
[  819.103649][ T6461]  ? __pfx_smsusb_probe+0x10/0x10
[  819.108673][ T6461]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  819.114219][ T6461]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  819.120117][ T6461]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  819.125766][ T6461]  usb_probe_interface+0x659/0xc70
[  819.130883][ T6461]  ? __pfx_usb_probe_interface+0x10/0x10
[  819.136518][ T6461]  really_probe+0x267/0xaf0
[  819.141047][ T6461]  __driver_probe_device+0x1ef/0x380
[  819.146336][ T6461]  driver_probe_device+0x4f/0x240
[  819.151367][ T6461]  __device_attach_driver+0x279/0x430
[  819.156735][ T6461]  bus_for_each_drv+0x258/0x2f0
[  819.161591][ T6461]  ? __pfx___device_attach_driver+0x10/0x10
[  819.167479][ T6461]  ? __pfx_bus_for_each_drv+0x10/0x10
[  819.172847][ T6461]  ? lockdep_hardirqs_on+0x7a/0x110
[  819.178051][ T6461]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  819.183909][ T6461]  __device_attach+0x2c5/0x450
[  819.188676][ T6461]  ? __pfx___device_attach+0x10/0x10
[  819.193954][ T6461]  ? _raw_spin_unlock+0x28/0x50
[  819.198797][ T6461]  device_initial_probe+0xa1/0xd0
[  819.203822][ T6461]  bus_probe_device+0x12a/0x220
[  819.208672][ T6461]  device_add+0x7e9/0xbb0
[  819.213003][ T6461]  usb_set_configuration+0x1a87/0x2110
[  819.218519][ T6461]  usb_generic_driver_probe+0x8d/0x150
[  819.223989][ T6461]  usb_probe_device+0x1c4/0x3b0
[  819.228839][ T6461]  ? __pfx_usb_probe_device+0x10/0x10
[  819.234205][ T6461]  really_probe+0x267/0xaf0
[  819.238703][ T6461]  __driver_probe_device+0x1ef/0x380
[  819.243984][ T6461]  driver_probe_device+0x4f/0x240
[  819.249002][ T6461]  __device_attach_driver+0x279/0x430
[  819.254403][ T6461]  bus_for_each_drv+0x258/0x2f0
[  819.259252][ T6461]  ? __pfx___device_attach_driver+0x10/0x10
[  819.265235][ T6461]  ? __pfx_bus_for_each_drv+0x10/0x10
[  819.270697][ T6461]  ? lockdep_hardirqs_on+0x7a/0x110
[  819.275890][ T6461]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  819.281686][ T6461]  __device_attach+0x2c5/0x450
[  819.286443][ T6461]  ? __pfx___device_attach+0x10/0x10
[  819.291717][ T6461]  ? _raw_spin_unlock+0x28/0x50
[  819.296587][ T6461]  device_initial_probe+0xa1/0xd0
[  819.301826][ T6461]  bus_probe_device+0x12a/0x220
[  819.306733][ T6461]  device_add+0x7e9/0xbb0
[  819.311064][ T6461]  usb_new_device+0xa08/0x16f0
[  819.315834][ T6461]  ? __pfx_usb_new_device+0x10/0x10
[  819.321054][ T6461]  ? _raw_spin_unlock_irq+0x23/0x50
[  819.326365][ T6461]  hub_event+0x2a1c/0x4f30
[  819.330814][ T6461]  ? do_raw_spin_unlock+0xf5/0x210
[  819.335957][ T6461]  ? __pfx_hub_event+0x10/0x10
[  819.340737][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  819.346489][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  819.352236][ T6461]  ? process_scheduled_works+0xa70/0x1860
[  819.357958][ T6461]  process_scheduled_works+0xb5d/0x1860
[  819.363531][ T6461]  ? __pfx_process_scheduled_works+0x10/0x10
[  819.369607][ T6461]  ? assign_work+0x3d5/0x5e0
[  819.374194][ T6461]  worker_thread+0xa53/0xfc0
[  819.378805][ T6461]  kthread+0x389/0x470
[  819.382864][ T6461]  ? __pfx_worker_thread+0x10/0x10
[  819.387961][ T6461]  ? __pfx_kthread+0x10/0x10
[  819.392545][ T6461]  ret_from_fork+0x514/0xb70
[  819.397145][ T6461]  ? __pfx_ret_from_fork+0x10/0x10
[  819.402260][ T6461]  ? __switch_to+0xc79/0x1410
[  819.407210][ T6461]  ? __pfx_kthread+0x10/0x10
[  819.411806][ T6461]  ret_from_fork_asm+0x1a/0x30
[  819.416604][ T6461]  </TASK>
[  819.420312][ T6461] Kernel Offset: disabled
[  819.424632][ T6461] Rebooting in 86400 seconds..